What does 'dissemination controls' mean in CUI handling?

• A. Destruction timing.
• B. Limits on how, where, and to whom CUI can be disclosed or shared.
• C. Encryption standards only.
• D. Only for printing and distribution.

Answer: (B)

Dissemination controls govern who can see CUI, and how and where that information can be disclosed or shared. They set the limits on disclosures to authorized individuals, within the need-to-know for the task, and specify approved methods and channels for sharing data. This is what keeps sensitive information from being released to the wrong people or through inappropriate avenues, whether internally or with external partners.

Think of it as the rulebook for sharing: it covers whether, to whom, and by what means CUI can be disclosed, not when to destroy it or only how it should be encrypted, or simply how printing and general distribution are handled. Destruction timing deals with disposing of data, encryption standards with protecting data, and printing/distribution concerns a subset of handling, whereas dissemination controls govern the broader sharing restrictions.