December 12, 2023 2 min read

CDSE DCSA Controlled Unclassified Information (CUI) Toolkit - A Great Resource for the DIB

Safeguarding Controlled Unclassified Information (CUI) is a strict requirement for any organization within the Defense Industrial Base (DIB).  It means now’s the time to implement sound practices relating to CUI. Luckily, for defense contractors, The Center for Development of Security Excellence (CDSE), a directorate within the Defense Counterintelligence and Security Agency (DCSA), offers an incredibly comprehensive and helpful Controlled Unclassified Information (CUI) Toolkit at

What is Controlled Unclassified Information?

Controlled Unclassified Information (CUI) is information the Government creates or possesses, or that an entity creates or possesses for or on behalf of the Government, that requires safeguarding or dissemination controls consistent with applicable laws, regulations, and Government-wide policies but is not classified under Executive Order 13526 "Classified National Security Information" or the Atomic Energy Act, as amended.

The CDSE DCSA CUI Toolkit also contains a number of helpful links relating to policy documents, additional resources, training & education, and much more.

Training Requirements:

  1. Identify individual responsibilities for protecting CUI.
  2. Identify the organizational index with CUI categories routinely handled by DoD personnel.
  3. Describe the CUI Registry, including purpose, structure, and location.
  4. Describe the differences between CUI Basic and CUI Specified.
  5. Identify the offices or organizations with DOD CUI Program oversight responsibilities.
  6. Address CUI marking requirements as described in the DODI 5200.48.
  7. Address the required physical safeguards and CUI protection methods as described in the DODI 5200.48.
  8. Address the destruction requirements and methods as described in the DODI 5200.48.
  9. Address the incident reporting procedures as described in the DODI 5200.48.
  10. Address methods for properly disseminating CUI within the DOD and with external entities inside and outside of the Executive Branch.
  11. Address the methods for properly decontrolling CUI as described in the DODI 5200.48.

About Arlington

We are Arlington, a team of innovative, solution-oriented, highly agile, and well-versed professionals with decades of experience in working with America’s defense industry. From emerging cybersecurity regulations to helping our clients solve complex security & compliance solutions – and so much more – you can trust Arlington, the firm that’s Dedicated to Defense®.  Learn more at