The CUI Hub
Your one-stop resource for understanding Controlled Unclassified Information: what it is, how to identify and handle it, and how to meet the safeguarding requirements that keep you eligible for DoD contracts.
Welcome to the CUI Hub by Secureframe
Controlled Unclassified Information (CUI) is sensitive but unclassified information that the federal government requires contractors to protect. For the roughly 337,000 prime contractors and subcontractors in the defense supply chain, CUI sits at the center of nearly every cybersecurity obligation: it determines whether DFARS 252.204-7012 applies to your contracts, which CMMC level you need, and ultimately whether you remain eligible for DoD work.
At Secureframe, we understand that CUI compliance is more than a contractual checkbox. It's how the defense industrial base protects the technical data behind American military advantage, and how your organization protects its place in that supply chain. Whether you're encountering CUI for the first time, building a safeguarding program, or looking for ways to shrink your compliance footprint, this hub is designed to help you navigate the process with confidence.
What's in the CUI Hub?
CUI Fundamentals
Understand what CUI is, why the program exists, and the difference between CUI Basic and CUI Specified.
CUI Categories
Explore real examples of CUI across the categories defense contractors encounter most, learn to navigate the ISOO and DoD CUI registries, and understand the difference between CUI and Federal Contract Information.
CUI Handling
Learn who's responsible for protecting CUI and applying markings, the regulations that make those duties enforceable, how requirements flow down to subcontractors, and who can decontrol CUI.
Scoping CUI
Determine whether you handle CUI using your contracts and information, then map how it flows through your environment and deliberately limit your compliance footprint.
CUI Safeguarding Requirements
Find guidance on NIST 800-171 requirements, correct CUI marking and cover sheets, the DoD's mandatory training requirement, and sanitizing media so CUI is unrecoverable.
CUI Enclaves
Find out how isolating CUI in a secure enclave can cut costs and simplify your path to CMMC. Plus find advice on how to choose between building your own and buying a managed enclave.