Det danske Fredsakademi
Kronologi over fredssagen og international politik 9. maj 2008 / Time Line May 9, 2008
Version 3.005/09/2008
Memorandum For The Heads Of Executive Departments And Agencies
White House News
SUBJECT: Designation and Sharing of Controlled Unclassified Information (CUI)
Purpose
(1) This memorandum (a) adopts, defines, and institutes "Controlled Unclassified Information" (CUI) as the single, categorical designation henceforth throughout the executive branch for all information within the scope of that definition, which includes most information heretofore referred to as "Sensitive But Unclassified" (SBU) in the Information Sharing Environment (ISE), and (b) establishes a corresponding new CUI Framework for designating, marking, safeguarding, and disseminating information designated as CUI. The memorandum's purpose is to standardize practices and thereby improve the sharing of information, not to classify or declassify new or additional information.
Background – The Current SBU Environment
(2) The global nature of the threats facing the United States requires that (a) our Nation's entire network of defenders be able to share information more rapidly so those who must act have the information they need, and (b) the United States Government protect sensitive information, information privacy, and other legal rights of Americans. A uniform and more standardized governmentwide framework for what has previously been known as SBU information is essential for the ISE to succeed. Accordingly, this memorandum establishes a standardized framework designed to facilitate and enhance the sharing of Controlled Unclassified Information.
Definitions
(3) In this memorandum, the following terms have the meaning indicated:
a. "Controlled Unclassified Information" is a categorical designation that refers to unclassified information that does not meet the standards for National Security Classification under Executive Order 12958, as amended, but is (i) pertinent to the national interests of the United States or to the important interests of entities outside the Federal Government, and (ii) under law or policy requires protection from unauthorized disclosure, special handling safeguards, or prescribed limits on exchange or dissemination. Henceforth, the designation CUI replaces "Sensitive But Unclassified" (SBU).
b. "CUI Council" is a subcommittee of the Information Sharing Council (ISC), created by the Intelligence Reform and Terrorism Prevention Act of 2004 (Public Law 108-458) (IRTPA).
c. "CUI Framework" refers to the single set of policies and procedures governing the designation, marking, safeguarding, and dissemination of CUI terrorism-related information that originates in departments and agencies, regardless of the medium used for the display, storage, or transmittal of such information.
d. "CUI Framework Standards Registry" (the "CUI Registry") refers to the official list of, and recognized standards for, CUI markings including "safeguarding," and "dissemination" maintained by the Executive Agent.
e. "Departments and Agencies" means executive agencies as defined in section 105 of title 5, United States Code; the United States Postal Service; but not the Government Accountability Office.
f. "Enhanced Safeguarding" is a handling requirement that means the information so designated is subject to measures more stringent than those normally required because inadvertent or unauthorized disclosure would create a risk of substantial harm. This requirement is indicated by the marking "Controlled Enhanced."
g. "Executive Agent" means the National Archives and Records Administration (NARA).
h. "Information" means any communicable knowledge or documentary material, regardless of its physical form or characteristics, that is owned by, is produced by or for, or is under the control of the Federal Government.
i. "Information Sharing Environment" means an approach that facilitates the sharing of "terrorism information," as defined by section 1016 of IRTPA.
j. "Safeguarding" means measures and controls that are prescribed to protect controlled unclassified information.
k. "Sensitive But Unclassified" refers collectively to the various designations used heretofore within the Federal Government for documents and information that are sufficiently sensitive to warrant some level of protection from disclosure but that do not warrant classification.
l. "Specified Dissemination" is a handling instruction that means the information so designated is subject to additional instructions governing the extent to which dissemination is permitted.
m. "Standard Dissemination" is a handling instruction that means dissemination is authorized to the extent it is reasonably believed that dissemination would further the execution of lawful or official mission purpose, provided that individuals disseminating this information do so within the scope of their assigned duties.
n. "Standard Safeguarding" is a handling requirement that means the information so designated is subject to baseline safeguarding measures that reduce the risks of unauthorized or inadvertent disclosure. This requirement shall be indicated through the use of the marking "Controlled."
o. "Terrorism-Related Information" means (i) information, as defined by Implementing Recommendations of the 9/11 Commission Act of 2007, Public Law 110-53, section 504; (ii) homeland security information, as defined by 6 U.S.C. 482(f); and (iii) law enforcement information relating to terrorism...
 |
 |