The National Archives and Records Administration (NARA), which implements the executive branch-wide CUI Program and oversees Federal agency actions to comply with the Order [E.O. 13556 or any successor order]. NARA has delegated this authority to the Director of the Information Security Oversight Office (ISOO).
Sources:
CNSSI 4009-2022
from
32 C.F.R., Sec. 2002
NIST SP 800-171r3
from
32 C.F.R., Sec. 2002
NIST SP 800-172r3
from
32 C.F.R., Sec. 2002