Those types of information for which laws, regulations, or governmentwide policies require or permit agencies to exercise safeguarding or dissemination controls, and which the CUI Executive Agent has approved and listed in the CUI Registry.
Source(s):
NIST SP 800-171 Rev. 2
from
32 C.F.R., 2002