What training is required for personnel handling CUI?

• A. Required training on safeguarding, handling, incident response, and reporting, refreshed periodically
• B. Generic IT training only
• C. No training required
• D. Annual training only

Answer: (D)

Training for personnel who handle CUI is about keeping everyone prepared to safeguard, handle, report, and respond to incidents involving CUI. The best fit says training happens on an annual basis. That cadence creates a consistent, ongoing reminder and ensures staff stay current on procedures, roles, and how to report issues. It means the program provides a refresher each year, keeping knowledge fresh without relying on a one-time or purely generic IT session. The other options miss the practical requirement: generic IT training doesn’t cover CUI-specific protections, claiming no training is required ignores policy, and describing training as annual without a clear cadence can fail to ensure ongoing awareness if not part of a regular cycle.