Skip to main content
background

Controlled Technical Information (CTI)

Controlled Technical Information (CTI) is a category of Controlled Unclassified Information (CUI) that covers technical data with military or space applications. CTI includes engineering drawings, specifications, technical manuals, test data, and research results that must be marked with distribution statements B through F and protected under the same NIST SP 800-171 safeguards required by DFARS 252.204-7012.

  • glossary
  • What Is Controlled Technical Information?

What Is Controlled Technical Information?

Controlled Technical Information is technical data with military or space application that is subject to access, use, reproduction, modification, display, release, disclosure, and dissemination controls. CTI is defined in DoD Instruction 5230.24 and falls under the broader CUI umbrella. Unlike general CUI, CTI specifically pertains to technical content — the engineering and scientific information that underpins defense systems, weapons platforms, and space capabilities.

Examples of Controlled Technical Information

CTI encompasses a wide range of technical data types commonly handled by defense contractors, including engineering drawings and CAD files for defense components, technical specifications and performance parameters, manufacturing process documentation, test procedures and results for defense systems, research and development data with military applications, software source code for defense systems, and technical manuals and maintenance procedures. The key distinguishing factor is that the information has military or space application and is subject to distribution controls.

CTI Distribution Statements

CTI must be marked with one of five distribution statements (B through F) as defined in DoD Instruction 5230.24. Each statement restricts distribution to progressively smaller audiences:

  • Distribution B: Distribution authorized to U.S. Government agencies only.
  • Distribution C: Distribution authorized to U.S. Government agencies and their contractors.
  • Distribution D: Distribution authorized to DoD and U.S. DoD contractors only.
  • Distribution E: Distribution authorized to DoD components only.
  • Distribution F: Further distribution only as directed by the controlling DoD office.

CTI and CMMC Compliance

Because CTI is a category of CUI, contractors handling CTI must achieve CMMC Level 2 certification and implement all 110 NIST SP 800-171 security requirements. Organizations should pay particular attention to access control, audit and accountability, and media protection practices, as CTI often exists in formats (CAD files, technical PDFs, simulation data) that require specific handling and tracking procedures beyond standard document management.