DoDM 5200.01, Volume 4, February 24, 2012, …

1 Department of Defense MANUAL. NUMBER , Volume 4. February 24, 2012. Incorporating Change 1, Effective May 9, 2018. USD(I). SUBJECT: DoD information security Program: Controlled Unclassified information (CUI). References: See Enclosure 1. 1. PURPOSE. a. Manual. This Manual is composed of several volumes, each containing its own purpose. The purpose of the overall Manual, as authorized by DoD Directive (DoDD) (Reference (a)) and DoD Instruction (DoDI) (Reference (b)), is to reissue DoD (Reference (c)) as a DoD Manual to implement policy, assign responsibilities, and provide procedures for the designation, marking, protection, and dissemination of CUI and classified information , including information categorized as collateral, sensitive compartmented information (SCI), and Special Access Program.

2 This guidance is developed in accordance with Reference (b), Executive Order ( ) 13526 and 13556, and part 2001 of title 32, Code of Federal Regulations (References (d), (e), and (f)). This combined guidance is known as the DoD. information security Program. b. Volume . This Volume provides guidance for the identification and protection of CUI. 2. APPLICABILITY. This Volume : a. Applies to OSD, the Military Departments, the Office of the Chairman of the Joint Chiefs of Staff and the Joint Staff, the Combatant Commands, the Office of the Inspector General of the Department of Defense, the Defense Agencies, the DoD Field Activities, and all other organizational entities within the Department of Defense (hereinafter referred to collectively as the DoD Components ).

3 B. Does not alter existing authorities and responsibilities of the Director of National Intelligence (DNI) or of the heads of elements of the Intelligence Community pursuant to policies issued by the DNI. c. Does NOT implement the new CUI program established by Reference (e). This Volume implements current DoD CUI policy according to Reference (b). The CUI program required by DoDM , February 24, 2012. Reference (e) will be implemented by a change to this Volume after the Federal policy is finalized. 3. DEFINITIONS. See Glossary.

4 4. POLICY. It is DoD policy, in accordance with Reference (b), to: a. Identify and protect national security information and CUI in accordance with national level policy issuances. b. Promote information sharing, facilitate judicious use of resources, and simplify management through implementation of uniform and standardized processes. c. Protect CUI from unauthorized disclosure by appropriately marking, safeguarding, disseminating, and destroying such information . 5. RESPONSIBILITIES. See Enclosure 2. 6. PROCEDURES. See Enclosure 3.

5 7. RELEASABILITY. UNLIMITED. This Volume is approved for public release and is available on the Internet from the DoD Issuances Website at Cleared for public release. This Volume is available on the Directives Division Website at 8. EFFECTIVE DATE. This Volume is effective upon its publication to the DoD Issuances Website. February 24, 2012. Enclosures 1. References 2. Responsibilities 3. Identification and Protection of CUI. 4. CUI Education and Training Glossary Change 1, 05/09/2018 2. DoDM , February 24, 2012. TABLE OF CONTENTS.

6 ENCLOSURE 1: REFERENCES ..5. ENCLOSURE 2: RESPONSIBILITIES ..7. UNDER SECRETARY OF DEFENSE FOR INTELLIGENCE (USD(I)) ..7. UNDER SECRETARY OF DEFENSE FOR POLICY (USD(P)) ..7. HEADS OF THE DoD COMPONENTS ..7. SENIOR AGENCY OFFICIALS ..7. ENCLOSURE 3: IDENTIFICATION AND PROTECTION OF CUI ..9. GENERAL ..9. FOUO LES information ..18. DoD UCNI ..20. LIMITED DISTRIBUTION information ..22. OTHER AUTHORIZED DESIGNATIONS ..24. Department of State (DoS) Sensitive But Unclassified (SBU) Drug Enforcement Administration (DEA) Sensitive information .

7 25. FOREIGN GOVERNMENT information ..26. DISTRIBUTION STATEMENTS ON TECHNICAL DOCUMENTS ..27. ENCLOSURE 4: CUI EDUCATION AND TRAINING ..30. CUI EDUCATION AND TRAINING RESOURCES ..30. INITIAL ORIENTATION ..30. REQUIREMENTS FOR information security PROGRAM PERSONNEL ..32. ADDITIONAL TRAINING REQUIREMENTS ..32. ANNUAL REFRESHER TRAINING ..32. CONTINUING CUI EDUCATION AND TRAINING ..33. MANAGEMENT AND OVERSIGHT TRAINING ..33. PROGRAM OVERSIGHT ..34. GLOSSARY ..35. PART I. ABBREVIATIONS AND ACRONYMS ..35. PART II. DEFINITIONS ..36. FIGURES.

8 1. Exemption Notice for FOUO Disseminated Outside of the Department of Defense ..16. Change 1, 05/09/2018 3 CONTENTS. DoDM , February 24, 2012. 2. LES Warning Statement ..19. 3. DoD UCNI Statement on information Transmitted Outside of the Department of Defense ..21. 4. LIMITED DISTRIBUTION Notice ..23. TABLE. Text of Distribution Statements ..28. Change 1, 05/09/2018 4 CONTENTS. DoDM , February 24, 2012. ENCLOSURE 1. REFERENCES. (a) DoD Directive , Under Secretary of Defense for Intelligence (USD(I)), . November 23, 2005. (a) DoD Directive , Under Secretary of Defense for Intelligence (USD(I)).

9 October 24, 2014, as amended (b) DoD Instruction , DoD information security Program and Protection of Sensitive Compartmented information , October 9, 2008. (b) DoD Instruction , DoD information security Program and Protection of Sensitive Compartmented information (SCI), April 21, 2016. (c) DoD , information security Program, January 14, 1997 (cancelled by Volume 1. of this Manual). (d) Executive Order 13526, Classified National security information , December 29, 2009. (e) Executive Order 13556, Controlled Unclassified information , November 4, 2010.

10 (f) Part 2001 of title 32, Code of Federal Regulations (g) DoD Directive , Under Secretary of Defense for Policy (USD(P)), . December 8, 1999. (h) Sections 552 1 and 552a 2 of title 5, United States Code (i) Clause of the Defense Federal Acquisition Regulation Supplement (j) DoD Directive , Clearance of DoD information for Public Release, . August 22, 2008, as amended (k) Deputy Secretary of Defense Memorandum, Web Site Administration, . December 7, 1998, with attached Web Site Administration Policies and Procedures, . November 25, 1998.