Controlled Unclassified Information (CUI) is federal, unclassified information that is still sensitive and therefore must be protected and controlled according to law, regulations, or government‑wide policy.

Below is a quick, exam-style breakdown to help with “which of the following is true…” type questions.

Core truth about CUI

If you see a multiple‑choice question asking “Which of the following is true of Controlled Unclassified Information?”, the correct option will usually say something close to:

  • It is federal information (created or possessed by the U.S. government or by an organization on its behalf) that is not classified but still requires safeguarding or dissemination controls under law, regulation, or government‑wide policy.

From the official definitions:

  • CUI is non‑classified federal information that requires specific safeguarding or dissemination controls.
  • It is created or possessed by the government, or by an entity acting for the government.
  • It explicitly does not include information that is classified under national security classification rules.

What CUI is not

When you’re eliminating wrong answers on a test, any option that says something like the following is false :

  • “CUI is the same as classified information” – wrong, CUI is unclassified by definition.
  • “CUI does not require any safeguarding” – wrong, the whole point of CUI is that some protection is required.
  • “CUI includes any unclassified information that an organization has” – wrong; it must be tied to federal government information and to specific legal or policy controls.

Key characteristics you can look for in options

Use this as a quick mental checklist when choosing the true statement:

  1. Mentions that the information is unclassified but still sensitive.
  2. States that it is government (or on‑behalf‑of‑government) information.
  3. Refers to safeguarding or dissemination controls required or allowed by law, regulation, or government‑wide policy.
  1. Clarifies that CUI is not national security classified information.

Any option that hits these points is almost certainly the correct “true” statement about controlled unclassified information.