What is cui documents must be reviewed to which procedures before destruction?

Before destroying Controlled Unclassified Information (CUI) documents, a review process is essential to ensure proper handling and compliance with relevant regulations. Here's what to consider:

• Identify CUI: The first step is confirming that the document indeed contains CUI. Consult the agency's or organization's <a href="https://www.wikiwhat.page/kavramlar/CUI%20Policy" target="_blank">CUI Policy</a> and the <a href="https://www.wikiwhat.page/kavramlar/CUI%20Registry" target="_blank">CUI Registry</a> to verify.

• Retention Requirements: Check if there are any legal, regulatory, or contractual retention requirements. Some CUI categories may have specific retention periods mandated by law. Consult relevant <a href="https://www.wikiwhat.page/kavramlar/Federal%20Regulations" target="_blank">Federal Regulations</a> or agency policies.

• Legal Hold: Determine if a legal hold is in place that would prevent destruction. Legal holds are often issued when litigation or an investigation is pending. Consult your organization's <a href="https://www.wikiwhat.page/kavramlar/Legal%20Department" target="_blank">Legal Department</a>.

• Review for Redaction/Declassification: Assess if the CUI can be declassified or redacted to remove the sensitive information. If so, the remaining non-CUI portion can be handled according to standard document management procedures.

• Authorized Destruction Methods: Ensure the destruction method aligns with your organization's policies and the specific CUI category. Approved methods include shredding, burning, pulverizing, pulping, melting, chemical decomposition, or overwriting (for electronic media). Refer to <a href="https://www.wikiwhat.page/kavramlar/NIST%20guidelines" target="_blank">NIST guidelines</a> and organizational policies for approved methods.

• Documentation of Destruction: Maintain records of the destruction, including the date, method, description of the documents, and the individuals involved. This documentation demonstrates compliance with CUI requirements.

• Personnel Training: Ensure that personnel handling CUI destruction are properly trained on relevant policies and procedures. Training should cover identification, handling, and destruction requirements.