The information must have the necessary Government connection, and a law, regulation, or Government-wide policy must require or permit safeguarding or dissemination controls.
CMMC Audit Preparation > CUI FLOWDOWN
The information must have the necessary Government connection, and a law, regulation, or Government-wide policy must require or permit safeguarding or dissemination controls.