The U.S. National Science Foundation's Controlled Unclassified Information (CUI) program standardizes the management of sensitive, unclassified information handled by NSF, its partners and organizations funded by the foundation.
NSF's CUI program is part of a government-wide information security reform.
On this page
What is CUI?
Visit the National Archives' website to learn about the different categories of CUI.
CUI is sensitive, unclassified information that requires safeguarding and controls on dissemination.
CUI is an umbrella term. It refers to a variety of information types that must be protected, including but not limited to:
- Personally identifiable information.
- Proprietary business information.
- International agreements.
- Procurement and acquisition information.
- Law enforcement-sensitive information.
What is NSF's CUI policy?
NSF's CUI policies apply to any of the foundation's partnerships, agreements or contracts where controlled unclassified information will be handled. The requirements are:
Marking
Documents, emails, presentations, systems and other materials containing CUI must be marked accordingly.
Protection
Materials containing CUI must be stored in protected digital and physical environments.
Sharing
CUI should only be shared with those with a lawful government purpose.
Destruction
When CUI is no longer needed, it must be destroyed or decontrolled.
Who can I contact about CUI?
Contact the NSF CUI program office at cui@nsf.gov with any questions or suggestions.
Additional information
- Executive Order 13556: Establishes the CUI Program, which applies to all executive branch agencies and departments.
- 32 CFR Part 2002: Details the implementation of the CUI Program.
- Controlled Unclassified Information: Guidance and policies by the National Archives and Records Administration, which oversees the CUI Program.
- CUI Training: Training and other resources developed by the National Archives.