Controlled Unclassified Information (CUI) is information that the government creates or possesses, or that an entity creates or possesses for or on behalf of the government, which law, regulation, or government-wide policy requires or permits an agency to handle using safeguarding or dissemination controls. It is not classified information but still requires protection due to its significance to public interest, government operations, or national security. The key truth about CUI is that it must be handled using safeguarding or dissemination controls to prevent unauthorized access or disclosure. It is marked and protected according to federal regulations and is not marked at the discretion of the information owner. CUI is not something used to conceal embarrassing or politically sensitive government information, nor does it pose no risk; mishandling it can pose risks to government missions or interests.

Summary of Facts About CUI:

• CUI is unclassified but protected information governed by specific laws and policies.
• It must be marked and handled with controls to safeguard dissemination.
• CUI is regulated by executive orders, federal regulations (especially 32 CFR Part 2002), and overseen by National Archives and Records Administration (NARA).
• It is not discretionary or arbitrary in its designation.
• Mishandling of CUI can result in risks to government interests.

Hence, the correct and true statement about Controlled Unclassified Information is that it must be handled using safeguarding or dissemination controls.