What must happen before CUI is approved for public release (including posting to a public website)?

What must happen before CUI is approved for public release (including posting to a public website)?

• A. A prepublication and security policy review under the standard DoD Component process
• B. A final senior official sign-off
• C. A FOIA request review
• D. A legal review by the attorney general

Answer: (A)

Before CUI can be approved for public release, it must go through a prepublication review and a security policy review under the standard DoD Component process. The prepublication review checks the material for any CUI, classified, or sensitive information and determines what redactions or dissemination controls are needed to allow public release. The security policy review evaluates the release against applicable protection rules and policy constraints to ensure there is no risk to operations, personnel privacy, or other sensitive interests. Together, these reviews produce a documented determination that public posting is permissible and that all safeguarding measures are in place. FOIA request handling is a separate process that applies after release or upon request; final senior official sign-off is not the usual gating requirement for routine public posting; and a legal review by the attorney general is not part of the standard DoD internal process for approving public release of CUI.

Before CUI can be approved for public release, it must go through a prepublication review and a security policy review under the standard DoD Component process. The prepublication review checks the material for any CUI, classified, or sensitive information and determines what redactions or dissemination controls are needed to allow public release. The security policy review evaluates the release against applicable protection rules and policy constraints to ensure there is no risk to operations, personnel privacy, or other sensitive interests. Together, these reviews produce a documented determination that public posting is permissible and that all safeguarding measures are in place.

FOIA request handling is a separate process that applies after release or upon request; final senior official sign-off is not the usual gating requirement for routine public posting; and a legal review by the attorney general is not part of the standard DoD internal process for approving public release of CUI.