Accessibility Tools

Skip to main content

Access World-Class NIST RMF Documentation with ASP Learn More

Who is allowed to actually create CUI?

  • Arlington Security Portal - Show on: Side Bar

Legally speaking, anyone is allowed to create CUI, so long as it is generated for, or on behalf of, an Executive Branch agency for a specific contract that falls into one of the many (over 100) prescribed CUI categories for the DoD.

Need to Implement a DoD CUI Program? Talk to Arlington 

DoD contractors - and other contractors providing services to federal agencies - need to have in place established policies, procedures, and processes regarding CUI that’s resident within their information systems. What federal contractors need is a CUI Program. Arlington can help, as we offer the following CUI services and solutions:

  • CUI Scoping & Gap Assessments
  • CUI Policy Development
  • CUI Identification
  • CUI Contractual Language Review
  • CUI Marking (Digital)
  • CUI Marking (Physical)

Arlington Security Portal

Get Access to 100 + NIST RMF security and privacy policies & procedures, programs, and plan templates.