CUI Deep Dive - Decontrolling CUI

Question 1

Decontrol of CUI constitutes public release. T/F

Answer 1

False

Question 2

Unauthorized release of CUI constitutes decontrol of CUI. T/F

Answer 2

False

Question 3

Name the two authorized ways of decontrolling CUI.

Answer 3

Automatic and positive decontrol

Question 4

CUI may be decontrolled by the end of any requirement to control, such as a predetermined event, imposed by applicable laws, regulations, or policies is under which decontrol authorization?

Answer 4

Automatic

Question 5

CUI may be decontrolled by action taken by the original designating authority to remove the applicable controls is under which decontrol authorization?

Answer 5

Positive

Question 6

Can agencies decontrol CUI to conceal or avoid accountability for any unauthorized disclosure?

Answer 6

No

Question 7

What 4 ways may CUI be automatically decontrolled?

Answer 7

1. Public release
2. Statutory release (such as FOIA)

3, When the CUI no longer requires control

4. when the designating agency includes a specific decontrolling indicator (date, certain event)

Question 8

What 2 ways may CUI be positively decontrolled?

Answer 8

1. When an authorized holder inside or outside the designating agency requests decontrol.
2. When CUI is no longer requires safeguarding or dissemination controls, declassification of information under any EO (e.g.; EO 13526), may cause decontrol of any associated or commingled CUI, but only if that CUI no longer requires control under LRPs where a date or certain is stipulated.