PM-17 Protecting Controlled Unclassified Information on External Systems
Program Management
Description
a. Establish policy and procedures to ensure that requirements for the protection of controlled unclassified information that is processed, stored or transmitted on external systems, are implemented in accordance with applicable laws, executive orders, directives, policies, regulations, and standards; and b. Review and update the policy and procedures [Assignment: organization-defined frequency].
Supplemental Guidance
Controlled unclassified information is defined by the National Archives and Records Administration along with the safeguarding and dissemination requirements for such information. The CUI Registry identifies approved CUI categories and subcategories with associated markings, safeguarding, and dissemination requirements. External systems include the systems of contractors and other organizations.
Changes from Rev 4
New control in Rev 5.