What is CUI Basic?
CUI Basic is one (1) of two (2) forms of Controlled Unclassified Information (CUI), defined by the US National Archives (NARA) per 32 CFR Part 2002. CUI Basic covers information that, while unclassified, requires safeguarding per NIST SP 800-171 controls.
Understanding CUI Basic helps organizations standardize protection without over-engineering controls where not needed. To contrast CUI Basic with CUI Specified, CUI Specified demands unique additional controls (e.g., special markings or enhanced physical security) based on a specific law, regulation or government-wide policy.