What level of safeguards must DoD Components apply at minimum?

• A. Only the safeguards required by local policy.
• B. Maximum possible safeguards.
• C. At least the minimum safeguards required to protect CUI.
• D. No safeguards required until a classification is assigned.

Answer: (C)

Safeguarding CUI starts with applying the minimum protections defined for CUI. DoD Components must implement at least these baseline safeguards to prevent unauthorized disclosure, alteration, or destruction of CUI, and to provide consistent protection across the department. Local policies can add more protections, but they cannot replace or reduce the required minimum safeguards. The idea is to have a uniform, baseline level of protection for all CUI, regardless of classification status. Choosing no safeguards or waiting for classification would miss the fact that CUI is sensitive and requires protection from the outset.