How will the exceptions be handled in the CUI Registry?
The memorandum requires that all CUI originated by departments and agencies and shared within the ISE conforms to the policies and standards for the designating, marking, safeguarding, and disseminating established in accordance with this memorandum. However, infrastructure protection agreements not fully accommodated under the CUI Framework (and its associated markings, safeguarding requirements, and dissemination limitations) will be considered exceptions to this CUI Framework. The memorandum identifies four exceptions: • 6 CFR Pt. 29 – PCII (Protected Critical Infrastructure Information) • 49 CFR Pts. 15 (Department of Transportation) & 1520 (Department of Homeland Security/Transportation Security Administration) – SSI (Sensitive Security Information) • 6 CFR Pt. 27 – CVI (Chemical Vulnerability Information) and • 10 CFR Pt. 73 – SGI (Safeguards Information) The CUI Framework will be used for such information to the maximum extent possible, but will not affect or interfere with spec
