Controlled Unclassified Information Specified (CUI Specified) is governed by federal laws and regulations such as Personally Identifiable Information and Health Information, which is governed by the Privacy Act and Health Insurance Portability and Privacy Act. with the CUI specified the requirements for handling, managing, storage, are already defined.
URL: CUI Training Guide