Just to nerd out for a second, and this stuff is so dumb I don't understand all of it (kind of my job, but I digress, I present:
This moron's guide to CUI.
Controlled Unclassified Information (CUI) is more than DoD, the rest of the government didn't want Defense to have all of the fun.
CUI Categories and
CUI Registry: Limited Dissemination Controls
You could have a document that reads something like CUI//DCRIT//FEDCON which translates to Controlled Unclassified Information about DoD Critical Infrastructure Security Information releasable only to Federal employees and contractors.
But that's a banner. Let's go to the CUI Designation Indicator. We get to put these on stuff like diagrams and slides decks and... toilet paper, I don't fucking know. This is on my briefing slides and network diagrams (a version, not specifically this example), along with a version of the banner described above.
Controlled By: OUSD(I&S)
Controlled By: CL&S INFOSEC
CUI Category(ies): PRVCY
Limited Distribution Control: FEDCON
POC: Daffy Duck, 307-555-1234
OR
We could have stayed with FOUO because no one will protect CUI any better than they protected FOUO according to sources who are not allowed to speak on the record blah, blah, blah.
So, yeah...anyone who deals with "FOUO" data, which is most of the Federal government, now has to learn CUI. I'll bet a dollar, pick just about any office or program out there, once one brief is published every swinging binary genital holder or whatever we are these days will Copy-Paste that bitch to infinity.
CUI//AWPBULLSHITRANTS//SHADOWSPEAR