The responsibility for applying CUI markings and dissemination instructions lies with the authorized holder of the information at the time of its creation.

In other words, the person (or office) who originates or first creates the Controlled Unclassified Information must:

  • Identify that the content is CUI.
  • Apply the correct CUI banner and other required markings to the document, email, slide, or data.
  • Specify any dissemination instructions (who may access it, how it may be shared, and any restrictions).

After that, all other authorized holders are responsible for following those markings and instructions when they handle, store, transmit, or share the information.

In many training and test questions, the “best answer” is: “Authorized holder of the information at the time of creation.”

Information gathered from public forums or data available on the internet and portrayed here.