The governance of the DoD Controlled Unclassified Information (CUI) program is provided by DoD Instruction 5200.48, titled “Controlled Unclassified Information.” This instruction establishes the DoD CUI program’s policy, designation, marking, handling, decontrolling, and training requirements, and it assigns responsibilities to DoD components and headquarters to implement and oversee the program.

Key points you typically see in DoDI 5200.48 include:

• Designation, marking, safeguarding, and dissemination controls for CUI across DoD components.

• Requirements for CUI training and education for personnel, including annual refresher training.

• Roles and responsibilities for DoD component heads, program managers, and overarching DoD offices to ensure compliance and governance.

• Coordination with related DoD and Defense Security Service structures to oversee policy execution and program status.

Additional context and support materials:

• The Air Force and other DoD publications align with DoDI 5200.48, detailing how CUI processes and roles are implemented within their organizations.

• The DoD CUI program is part of a broader government-wide framework established by Executive Order 13556, with DoD implementing specific DoDI guidance.

If you want, I can pull the exact language or sections from DoDI 5200.48 (and related DoD guidance) to quote or summarize specific subsections (e.g., designation, marking, training, or governance roles).