Purpose
Principal Investigators, with assistance from OU IT, must classify information in accordance with the OU IT Information Classification standard statements.
Classification
All CUI data is classified as Category D1 Confidential Research.
Categorization
Once data has been classified as Category D1, the data must be categorized to identify the safeguards required to protect the confidentiality of the CUI.
- CUI Basic is any category of CUI which a law, regulation, or Government-wide policy says must be protected following NIST SP 800-171.
- CUI Specified must be protected following NIST SP 800-171 and has different marking and handling requirements. It is designed to accommodate the specific requirements of certain customers.
ITAR vs. EAR vs. DFARS vs. FAR
