Which item is explicitly part of the minimum CUI training standards?

• A. Describe the CUI Registry.
• B. Encrypt all CUI.
• C. Disaster recovery procedures.
• D. Financial auditing.

Answer: (A)

Knowing how to describe the CUI Registry is included in the minimum CUI training because the Registry is the authoritative source that defines CUI categories, markings, and the specific handling requirements that apply to each type of information. Training that covers the Registry equips personnel to identify what needs protection and how to label and safeguard it correctly, ensuring consistent implementation across programs and systems. The other options relate to broader security or operational practices but are not part of the baseline CUI training requirements. For example, encryption of all CUI isn’t universally mandated by the minimum training standards, disaster recovery procedures address continuity planning rather than CUI marking, and financial auditing concerns separate from the core duties of handling CUI designations.