Controlled unclassified information is
“ | [a] categorical designation that refers to unclassified information that does not meet the standards for National Security Classification under Executive Order 12958, as amended, but is (i) pertinent to the national interests of the United States or to the important interests of entities outside the federal government, and (ii) under law or policy requires protection from unauthorized disclosure, special handling safeguards, or prescribed limits on exchange or dissemination. | ” |
Source
- NIST Special Publication 800-53, Rev. 3, Recommended Security Controls for Federal Information Systems and Organizations, at B-3 (Aug. 2009).