Controlled Unclassified Information (CUI)
CUI is sensitive information that requires protection under laws, regulations and Government-wide policies.
CUI controls are specified for access control, awareness and training, auditing, configuration management, communications protection and more!
Some controls may be met through process or policy, and some will require a technology solution. CUI at Georgia Tech can include, but is not limited to these types listed here:
Some federally funded research, visa records, information protected by the Health Insurance Portability and Accountability Act of 1996 or HIPAA, and the Family Educational Rights and Privacy Act of 1974 or FERPA. For a complete list, click the link shown here.
Georgia Tech CUI Policy
Georgia Tech is obligated to ensure that all systems and processes involved with CUI are compliant with NIST 800-171 to continue receiving Federal funds associated with the use of this data (either directly received from the government or indirectly through associated covered contracts and contractors).
Contacts
Academic Research Security Team:
research_security@enclave.gatech.edu
GTRI Research Security Team:
Cybersecurity Team:
GTRI Information & Cybersecurity Team:
Required Training
CUI Overview: Each employee at Georgia Tech is required to take a CUI Overview course as part of our Fall Compliance Program which provides a general understanding of CUI, its importance, how to report a spill, and an introduction to handling it safely and securely.
{ Coming Soon }
CUI Marking & Handling (Level 2): This course is required for non-GTRI Faculty, Staff & Students involved in research with CUI. It provides a deeper understanding of CUI, including identifying CUI, understanding the CUI designation indicator block and distribution statements, proper marking practices for various document types, e-mails, presentations, and media containing CUI, along with other marking considerations. This course also discusses physical and system storage of CUI, as well as sharing/distributing CUI. Finally, this course provides insight into the proper procedures and relevant policies for the destruction and disposition of CUI.
