Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

ITL Bulletin

Protection of Controlled Unclassified Information

Date Published: October 2015


Ron Ross (NIST), Kelley Dempsey (NIST), Larry Feldman (G2), Gregory Witte (G2)



contractor information systems; controlled unclassified information; CUI registry; derived security requirement; Executive Order 13556; FISMA; nonfederal information systems; security control; security requirement
Control Families

Access Control; Audit and Accountability; Awareness and Training; Configuration Management; Identification and Authentication; Maintenance; Personnel Security; Physical and Environmental Protection; System and Services Acquisition; System and Information Integrity


October 2015 ITL Bulletin

Supplemental Material:
None available

Document History:
10/19/15: ITL Bulletin (Final)