How does CUI Specified differ from CUI Basic?

• A. CUI Specified has fewer restrictions than Basic.
• B. They are the same in terms of dissemination.
• C. CUI Specified carries additional dissemination or handling restrictions beyond the Basic level.
• D. Specifed includes only physical marking differences.

Answer: (C)

The key idea is that CUI Specified requires more controls than CUI Basic. Basic provides a baseline level of protection with standard restrictions on who can access and how information can be shared. When something is designated as CUI Specified, it carries additional dissemination and handling restrictions beyond that baseline—meaning stricter access controls, storage and transmission requirements, and often more specific marking to reflect the heightened sensitivity. This is why the correct description is that CUI Specified imposes extra restrictions beyond the Basic level.

Why the other options don’t fit: it isn’t fewer restrictions, so that option isn’t accurate. It isn’t the same in terms of dissemination, since Specified adds extra controls. And it isn’t only about physical markings; the extra restrictions cover dissemination and handling, not just labeling.