2002.16.a - Accessing & disseminating - General policy

Question 1

Agencies should disseminate and permit access to CUI, provided such access or dissemination abides by the ____, ___________, or ________ that established the CUI category or subcategory

Answer 1

laws, regulations, or policie

Question 2

Agencies should disseminate and permit access to CUI, provided such access or dissemination furthers a ______ __________ _______

Answer 2

awful Government purpose

Question 3

Agencies should disseminate and permit access to CUI, provided such access or dissemination Is not restricted by an authorized _______ _____________ ______ established by the CUI EA

Answer 3

limited dissemination control

Question 4

Agencies should disseminate and permit access to CUI, provided such access or dissemination is not otherwise __________ __ ___

Answer 4

prohibited by law

Question 5

Agencies must impose dissemination controls (a)___________ and should do so only to apply necessary restrictions on access to CUI, including those required by law, regulation, or policy.

Answer 5

(a) judiciously

Question 6

Agencies may not impose controls that __________ or __________ ________ access to CUI.

Answer 6

unlawfully or improperly restrict

Question 7

Prior to disseminating CUI, authorized holders must label CUI according to (a)_______ ________ issued by the CUI EA, and must include any specific markings required by (b)___, __________, or ______.

Answer 7

(a) marking guidance

(b) law, regulation, or policy

Question 8

To disseminate CUI to a non-executive branch entity, authorized holders must reasonably expect that all intended recipients are (a)__________ __ _______ the CUI and have a basic understanding of (b)___ __ ______ CUI.

Answer 8

(a) authorized to receive

(b) how to handle

Question 9

When agencies intend to share CUI with a non-executive branch entity, they should enter into a ______ ___________-_______ _________, whenever feasible

Answer 9

formal information-sharing agreement

Question 10

A formal agreement may take any form the agency head approves, but when established, it must include a requirement to comply with __ ____, __ ___ ____ ____, and the ___ ________.

Answer 10

EO 13556, 32 CFR Part 2002, and the CUI Registry

Question 11

When an agency cannot enter into formal agreements, but the agency’s mission requires it to disseminate CUI to non-executive branch entities, the agency must communicate to the recipient that the Government (a)________ __________ the non-executive branch entity to protect CUI in accordance with EO 13556, 32 CFR Part 2002, and the CUI Registry, and that (b)___________ ______ _________ the CUI if the entity disseminates it further.

Answer 11

(a) strongly encourages

(b) protections should accompany

Question 12

When entering into agreements or arrangements with a foreign entity, agencies should encourage that entity to protect CUI in accordance with EO 13556, 32 CFR Part 2002, and the CUI Registry to the extent possible, but agencies may use their judgment as to what and how much to communicate, keeping in mind the ultimate goal of ____________ ___.

Answer 12

safeguarding CUI

Question 13

If an agency enters into agreements or arrangements with foreign entities that include safeguarding or dissemination controls on unclassified information, the agency must not _________ _ ________ __________ ______ to the CUI Program (such as alternate markings)

Answer 13

establish a parallel protection regime

Question 14

If an agency enters into agreements or arrangements with foreign entities that include safeguarding or dissemination controls on unclassified information, the agency must abide by any requirements set by the ___ ________ or _____________ _________ ____, ___________, or ________.

Answer 14

CUI category or subcategory’s governing laws, regulations, or policies

Question 15

When an agency entered into an information-sharing agreement prior to November 14, 2016, the agency should ______ ___ _____ in that agreement that conflict with the requirements in EO 13556, 32 CFR Part 2002, and the CUI Registry, when feasible.

Answer 15

modify any terms

Question 16

Information-sharing agreements with non-executive branch entities must include provisions that state non-executive branch entities ____ ______ ___ __ __________ ____ EO 13556, 32 CFR Part 2002, and the CUI Registry.

Answer 16

must handle CUI in accordance with

Question 17

Information-sharing agreements with non-executive branch entities must include provisions that state ______ __ ___ __ _______ __ _________ established in applicable laws, regulations, or policies.

Answer 17

misuse of CUI is subject to penalties

Question 18

Information-sharing agreements with non-executive branch entities must include provisions that state the non-executive branch entity must _____ ___ ___-__________ ____ ________ ____________ to the disseminating agency using methods approved by that agency’s SAO.

Answer 18

report any non-compliance with handling requirements

Question 19

When the disseminating agency is informed of non-compliance by a non-executive branch entity but is not the designating agency, the disseminating agency must ______ ___ ___________ ______.

Answer 19

notify the designating agency

Question 20

Agencies need not enter a written agreement when they share CUI with ________, including any __________ or ______ thereof

Answer 20

(a) Congress

(b) committees or office

Question 21

Agencies need not enter a written agreement when they share CUI with a (a)_____ __ _________ ____________, or any entity when directed by an order of a (b)_____ __ _________ ____________ or a Federal (c)______________ ___ _____ (___) appointed under 5 U.S.C. 3501.

Answer 21

(a), (b) court of competent jurisdiction

(c) administrative law judge (ALJ)

Question 22

Agencies need not enter a written agreement when they share CUI with the ___________ _______, in the course of performing duties of the Government Accountability Office.

Answer 22

Comptroller General

Question 23

Agencies need not enter a written agreement when they share CUI with individuals or entities, when the agency ________ ___________ __ ____ ________ __ _ ____ __ _______ ___ request.

Answer 23

releases information to them pursuant to a FOIA or Privacy Act