2002.16.b - Controls on accessing & disseminating CUI Flashcards
Authorized holders should ___________ and _________ ______ to CUI Basic for any recipient when the access meets the requirements set out in 32 CFR PArt 2002.16.a.1.
disseminate and encourage access
Authorized holders disseminate and allow access to CUI Specified as ________ or _________ by the authorizing laws, regulations, or Government-wide policies that established that CUI Specified.
required or permitted
The CUI Registry annotates CUI that requires or permits _________ ________ based on law, regulation, and Government-wide policy.
Specified controls
In the absence of specific dissemination restrictions in the authorizing law, regulation, or policy, agencies may disseminate CUI Specified as they would ___ _____.
CUI Basic
Non-executive branch entities may receive CUI directly from _______ __ ___ _________ ______ or as sub-recipients from other ___-_________ ______ ______.
(a) members of the executive branch
(b) non-executive branch entities
Agencies may place additional limits on disseminating CUI only through use of the limited dissemination controls approved by the ___ __ and published in the ___ ________.
(a) CUI EA
(b) CUI Registry
_______ _____________ _________ approved by the CUI EA and published in the CUI Registry controls are separate from any controls that a CUI Specified authority requires or permits.
Limited dissemination controls
Using limited dissemination controls to _____________ ________ _______to CUI is contrary to the goals of the CUI Program.
unnecessarily restrict access
Agencies may use limited dissemination controls only when it furthers a ______ __________ _______, or laws, regulations, or Government-wide policies require or permit an agency to do so.
lawful Government purpose
If an authorized holder has significant doubt about whether it is appropriate to use a limited dissemination control, the authorized holder should consult with and follow the ___________ ________ ______. If, after consulting the policy, significant doubt still remains, the authorized holder should not apply the limited dissemination control.
designating agency’s policy
Only the ___________ ______ may apply limited dissemination controls to CUI. Other entities that receive CUI and seek to apply additional controls must request permission to do so.
designating agency
Authorized holders may apply limited dissemination controls to any CUI for which they are ________ or _________ to restrict access by or to certain entities.
required or permitted
Designating entities may combine approved limited dissemination controls listed in the ___ ________ to accommodate necessary practices.
CUI Registry
