2002.8 - Roles and responsibilities - CUI SAO Flashcards
Must be at the ______ _________ _______ level or equivalent
Senior Executive Service
_______ and ________ the agency’s CUI Program
Directs and oversees
Designates a CUI _______ _______
Program manager
Ensures the agency has CUI ____________ _______ and _____, as needed
implementing policies and plans
Implements an _________ and ________ program pursuant to 32 CFR Part 2002.30
education and training
Upon request of the CUI EA under section 5(c) of EA 13556, provides an update of CUI ______________ _______ for subsequent reporting
implementation efforts
Submits to the CUI EA any ___, __________, or ______ not already incorporated into the CUI Registry that the agency proposes to use to designate unclassified information for safeguarding or dissemination controls
law, regulation, or policy
Coordinates with the CUI EA, as appropriate, any proposed law, regulation, or policy that would _________, _________, or ______ a category or subcategory of CUI, or change information controls applicable to CUI
establish, eliminate, or modify
Establishes processes for handling CUI (a) _________ requests submitted by (b) __________ _______
(a) decontrol
(b) authorized holders
Includes a description of all existing _______ in the annual report to the CUI EA, along with the rationale for each ______ and, where applicable, the alternative steps the agency is taking to ensure sufficient protection of CUI within the agency
(a) waivers
(b) waiver
Develops and implements the agency’s ____-__________ _______
self-inspection program
Establishes a mechanism by which authorized holders (both inside and outside the agency) can contact a designated agency representative for instructions when they receive ________ __ __________ ______ information the agency designated as CUI
unmarked or improperly marked
Establishes a process to ______ and ______ __________ to CUI status (which may include improper or absent marking)
accept and manage challenges
Establish _________ and ________ for reporting and investigating misuse of CUI
processes and criteria