Controlled Unclassified Information (CUI) protection in nonfederal systems and organizations is essential to federal agencies. It can directly impact the ability of the Federal Government to carry out its assigned missions and business operations successfully.

The assessment procedures are flexible and customizable to the needs of organizations and assessors. These assessments can be 1) self-assessments; 2) independent, third-party assessments; or 3) government-sponsored assessments.