What is the concept of 'need to know' when several agencies share CUI?

• A. Access is universal for all personnel with government clearance.
• B. Access is limited to anyone with a need to know within any agency.
• C. Access is limited to personnel from the receiving agency with a valid need to know and for official duties.
• D. Access is determined by random selection.

Answer: (C)

In sharing CUI among agencies, need-to-know means access is granted only to individuals who have a legitimate job-related reason to know the information and only for their official duties within the receiving agency. This ensures that the data stays with those who need it to perform their tasks, rather than being exposed to everyone with clearance or chosen at random. The receiving agency controls who has access based on a defined need to know tied to their role, which is why the correct approach is to restrict access to personnel from the receiving agency who have a valid need to know and are performing official duties.