What Is Sensitive But Unclassified Data?

Sensitive but Unclassified (SBU) information is

information that is not classified for national security reasons

, but that warrants/requires administrative control and protection from public or other unauthorized disclosure for other reasons.

What is the difference between SBU and CUI?

SBU, which stands for Sensitive But Unclassified information, is in the process of being replaced by a newly mandated

Government-wide initiative

, which will result in SBU being renamed to Controlled Unclassified Information (CUI).

What is the difference between sensitive but unclassified data and unclassified data?

When using these terms outside of the government, “sensitive” can refer to

any data that requires confidentiality

and “unclassified” data can mean any data that doesn’t require confidentiality.

Is SBU the same as FOUO?

Sensitive But Unclassified (SBU) is a designation of information in the United States federal government that, though unclassified, often requires strict controls over its distribution. … Some categories of SBU information have authority in statute or regulation (e.g. SSI, CII) while others, including

FOUO, do not

.

What does it mean when a document is unclassified?

Unclassified is

a security classification assigned to official information that does not warrant the assignment of Confidential, Secret, or Top Secret markings

but which is not publicly-releasable without authorization.

Can sensitive unclassified information be released to the public?

For Official Use Only (FOUO)

Identifies information or material that, although

unclassified, may be inappropriate for public release

. It can be a kind of a catch-all designation when in doubt.

What is considered controlled unclassified information?

Controlled Unclassified Information (CUI) is

information that requires safeguarding or dissemination controls consistent with applicable laws, regulations, and Government-wide policies

, but is not classified under Executive Order 13526 “Classified National Security Information” or the Atomic Energy Act, as amended.

Does CUI replace unclassified?

CUI will replace agency specific labels such as For Official Use Only (FOUO), Sensitive But

Unclassified

(SBU), and Law Enforcement Sensitive (LES) on new data and some data with legacy labels will also qualify as Controlled Unclassified Information.

Who is responsible for applying CUI markings?

The authorized holder of a document or material

is responsible for determining, at the time of creation, whether information in a document or material falls into a CUI category. If so, the authorized holder is responsible for applying CUI markings and dissemination instructions accordingly.

What are two types of CUI?

• Controlled Technical Information (CTI)
• DoD Critical Infrastructure Security Information.
• Naval Nuclear Propulsion Information.
• Unclassified Controlled Nuclear Information – Defense (UCNI)

What is considered FOUO information?

For Official Use Only (FOUO) is a document designation, not a classification. This designation is used by Department of Defense and

a number of other federal agencies to identify information or material which

, although unclassified, may not be appropriate for public release.

How are these SBU classified?

a. Sensitive but Unclassified (SBU) information is

information that is not classified for national security reasons

, but that warrants/requires administrative control and protection from public or other unauthorized disclosure for other reasons.

What does FOUO sensitive mean?

The Computer Security Act of 1987, Public Law 100-235, defines “sensitive information” as “

any information, the loss, misuse, or unauthorized access to or modification of which could adversely affect the national interest or the conduct of Federal programs, or the privacy to which individuals are entitled under Section

…

What’s the difference between unclassified and declassified?

Information that is not so labeled is called “Unclassified information”. The term declassified is used for information that has had its classification removed, and downgraded refers to

information that has been assigned

a lower classification level but is still classified.

What’s another word for unclassified?

What must you ensure before transmitting personally identifiable information?

What must you ensure before transmitting Personally Identifiable Information (PII) or Protected Health Information (PHI) via e-mail?

Transmissions must be between Government e-mail accounts and must be encrypted and digitally signed when possible

. … Encrypt the e-mail and use your Government e-mail account.