Training & Education

During work hours, keep CUI under the control of authorized people and do not leave it where unauthorized people can access, view, or overhear it. After hours, decide storage based on whether the facility provides continuous monitoring of access. If it does, unlocked desks, cabinets, or containers may be acceptable under the DoD rule. If it does not, use locked desks, file cabinets, bookcases, locked rooms, or similarly secured areas.

European manufacturers and engineering firms supporting U.S. defense programs may be required to protect Controlled Unclassified Information, even when operating outside the United States. This article explains why CUI requirements travel with U.S. technical data, where physical compliance gaps often appear, and how EU facilities can prepare for U.S. defense supply chain expectations.

If your space does not clearly prevent unauthorized people from entering, seeing, or hearing CUI, it is probably not yet a true controlled environment. That is the gap organizations should be working to close.