What training is required for personnel who handle CUI?

• A. General IT security training only.
• B. Security clearance renewal training.
• C. Emergency response training.
• D. CUI awareness and handling training, with required refreshers as mandated.

Answer: (D)

Handling CUI requires training that specifically covers CUI awareness and how to handle it, including how it must be marked, stored, transmitted, accessed, and disposed of, with refreshers to keep up with policy updates. This focused instruction ensures personnel understand the protections required for CUI and the procedures they must follow in daily work. General IT security training offers broad security concepts but doesn’t guarantee knowledge of CUI-specific rules, safeguards, and dissemination restrictions. Training tied to security clearances addresses eligibility and access permissions rather than the practical, ongoing practices for safeguarding CUI. Emergency response training concentrates on incident response and safety, not the proper handling of CUI.