Any area or space an authorized holder deems to have adequate physical or procedural controls (e.g., barriers or managed access controls) to protect CUI from unauthorized access or disclosure.
Sources:
CNSSI 4009-2022
from
32 C.F.R., Sec. 2002.4