What Is CUI (Controlled Unclassified Information)?

This brief explains Controlled Unclassified Information (CUI), its sensitivity and examples, the main federal frameworks and standards governing its protection (NARA CUI Program, NIST SP 800-171, CMMC 2.0, FISMA/FedRAMP), typical vulnerabilities in how CUI moves (misconfigured cloud storage, weak encryption, insecure endpoints), and how SecurityScorecard’s tools can help with visibility, vendor monitoring, and compliance; the OPM breach is cited as an example of CUI exposure.