Controlled Unclassified Information (CUI)

This course provides researchers, institutional administrators, and IT professionals with the knowledge needed to safeguard CUI and meet federal compliance obligations.

INTERESTED? Demo Course
Scroll Down Arrow


About this Course

This course provides researchers, institutional administrators, and IT leadership and staff with an overview of the federal Controlled Unclassified Information (CUI) program and its requirements. Learners will gain practical guidance on identifying, safeguarding, and managing CUI in research, with optional modules addressing institutional responsibilities and system administrator practices.

Language Availability: English

Suggested Audiences: Research Administrators, Researchers, System Administrators and IT Staff

Organizational Subscription Price: Included in Information Privacy & Security series, available as part of an organizational subscription package or for $675 per year/per site as a subscription add-on for government and non-profit organizations; $750 per year/per site as a subscription add-on for for-profit organizations
Independent Learner Price: $99 per person


Course Content

Introduction to Controlled Unclassified Information

This module provides an overview of the federal Controlled Unclassified Information (CUI) program, including its purpose, regulatory framework, and applicability to universities and other non-federal organizations. Learners will examine common CUI categories, safeguarding and marking requirements, and the key compliance documents used to manage CUI in research settings.

Recommended Use: Required
ID (Language): 22680 (English)
Author(s): Mary Duarte Millsaps, CRA, ECoP® (ITAR & EAR) - North Carolina State University

Controlled Unclassified Information and Information Technology

This module examines the technology, cybersecurity controls, and researcher responsibilities involved in protecting Controlled Unclassified Information (CUI). Learners will explore approved CUI systems, access controls, secure communications, incident reporting requirements, insider threats, and security practices that help maintain compliance and protect sensitive research information.

Recommended Use: Required
ID (Language): 22681 (English)
Author(s): Laura Elkin, CISSP - University of Cincinnati

Institutional Management of Controlled Unclassified Information

This module explores the institutional policies, governance structures, and compliance responsibilities needed to support a Controlled Unclassified Information (CUI) program. Learners will examine roles and responsibilities, NIST SP 800-171 and CMMC compliance frameworks, security planning, incident reporting, and lifecycle management practices for handling CUI from project initiation through final disposition.

Recommended Use: Supplemental
ID (Language): 22682 (English)
Author(s): Mary Duarte Millsaps, CRA, ECoP® (ITAR & EAR) - North Carolina State University

Information Security for the System Administrator

This module focuses on the role of system administrators in securing Controlled Unclassified Information (CUI) environments and maintaining compliance with NIST SP 800-171 and CMMC requirements. Learners will examine cybersecurity controls, incident response, insider threat awareness, documentation practices, and change management processes that support the secure operation of CUI systems.

Recommended Use: Supplemental
ID (Language): 22683 (English)
Author(s): Laura Elkin, CISSP - University of Cincinnati


Learn More

This field is for validation purposes and should be left unchanged.
Your Name(Required)
This field is hidden when viewing the form
I'd Like To Receive Emails From CITI Program