What is the minimum security level referenced for DoD CUI systems and networks?

What is the minimum security level referenced for DoD CUI systems and networks?

• A. Low Confidentiality
• B. Moderate Confidentiality
• C. High Confidentiality
• D. Moderate Confidentiality (Consistent with Federal Standards)

Answer: (D)

Moderate Confidentiality (Consistent with Federal Standards) is the minimum level. This reflects federal guidance that CUI requires at least a Moderate level of protection for confidentiality, aligning DoD handling with national standards such as FIPS 199 and related NIST controls. Low confidentiality would inadequately safeguard CUI, while High would exceed the baseline. The “Consistent with Federal Standards” part emphasizes that the baseline is set to match federal expectations for safeguarding sensitive information.

Moderate Confidentiality (Consistent with Federal Standards) is the minimum level. This reflects federal guidance that CUI requires at least a Moderate level of protection for confidentiality, aligning DoD handling with national standards such as FIPS 199 and related NIST controls. Low confidentiality would inadequately safeguard CUI, while High would exceed the baseline. The “Consistent with Federal Standards” part emphasizes that the baseline is set to match federal expectations for safeguarding sensitive information.