CMMCDocs.comHome / Glossary / CUI Basic vs CUI Specified
CUI Basic vs CUI Specified
Also known as: CUI Specified ยท CUI Basic
Two subcategories of CUI. CUI Basic uses the standard safeguarding rules; CUI Specified follows additional rules defined by the underlying authority.
Controlled Unclassified Information is divided into two subcategories: CUI Basic and CUI Specified.
**CUI Basic** is information that requires safeguarding under the standard CUI rules (32 CFR Part 2002) but is not subject to additional handling, marking, or dissemination restrictions beyond those baseline rules.
**CUI Specified** is information for which the underlying law, regulation, or government-wide policy contains specific handling requirements that exceed the CUI baseline. Examples include export-controlled technical data (ITAR/EAR), tax information, and certain law enforcement records.
The practical difference: CUI Basic gets the standard markings and is handled per 32 CFR Part 2002. CUI Specified gets the standard markings PLUS any additional markings or handling rules required by its underlying authority.
Stop Googling. Start working.
CMMCDocs has all 110 NIST SP 800-171 Rev 2 requirements built in — with the language, the templates, and the evidence vault you need. Spin up a free demo workspace and click around the way an assessor would.
Get my demo account