|
|
||||||||||||||||||
...
To that end, the IT Policy group reviewed NIST SP 800-171 Rev. 2, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations, and has implemented the following interim solution, inline with 800-171 requirements. A crosswalk is included in Appendix A.
What to do
...
if you receive CUI but do not have a CUI-Enabled account?
- words
CUI Guidance
- additional training required
- do not mark
- your email must be CUI Enabled to receive
- can only be stored in specific locations
...
If you receive CUI and you do not have a CUI-enabled account, please delete the email and delete the email from the trash folder as well. If you downloaded any file on to your device, please delete the file and empty trash as well. In addition to these steps, please email [email protected] and let them know that you received file/s marked CUI and about the action you took.
What to do if you have an ongoing need to receive or store CUI?
We have developed an interim solution that allows Lab employees to apply for accounts configured to permit the receipt and storage of CUI. If you have a recurring need to receive CUI, you will need a CUI-enabled Gmail account. If you have a recurring need to retain or share CUI, you require a CUI-enabled shared drive.
If you have an urgent itermin interim need to recieve receive and store CUI whiel the full deployment is rolled out, we have developed an interim solution. Please , please see the following page, which requires authenticaiton authentication for more detials.details:
Link to Intranet page with details.
CUI Guidance
- additional training required
- do not mark
- your email must be CUI Enabled to receive
- can only be stored in specific locations
Interim CUI Sending
- password protected
- proxy Entrust, contact itpolicy
...
