Controlled Unclassified Information

Consistent with its strategic goals, the University of Virginia is rapidly growing and diversifying its research portfolio, creating extraordinary opportunities for the University to increase its societal impact.

Going forward, many UVA researchers will pursue and undertake more applied and translational research projects in partnership with federal, industry, and foundation collaborators. A prerequisite to successfully competing for and conducting such research is UVA's ability to demonstrate its commitment and capabilities to appropriately safeguard controlled unclassified information (CUI).  This website provides a general overview of CUI and how it is safeguarded and managed at UVA.

The Office of Under Secretary of Defense for Acquisition and Sustainment, Department of Defense (DOD), has announced a new certification requirement for contractors that will be phased in starting in 2020. The Cybersecurity Maturity Model Certification (CMMC) requires that contractors be audited by 3rd party organizations to determine their current cybersecurity maturity level (1-5). UVA is currently working to meet CMMC level 3 certification requirements. New information will be added to this webpage as it becomes available.




UVA Activities & CUI Requirements

Department of Defense

Proposal Preparation

Resources for Researchers and Support Staff