CUI marking
Set the system-high banner and the CUI designation indicator once, in Settings. Foxborne shows the banner on every screen and prints both marks on every report and case file from the next render.
On this page9
A report that holds controlled unclassified information carries two marks. The banner says the document holds CUI, and the designation indicator says who designated it. An admin sets both once, and Foxborne applies them everywhere.
This page shows where each mark goes. It is not legal advice: your contract and your security office choose the category and the controls, and Foxborne puts them on the page.
Before you start#
- You need the Admin role.
- You have your program's marking decisions: who controls the information, the office, the CUI category, the dissemination control and a point of contact.
- You have the text of the system use notice your security office requires.
What the two marks are#
32 CFR 2002.20 lets a CUI banner hold up to three elements. The control marking, CUI or CONTROLLED, is mandatory. Category markings are mandatory for CUI Specified, and limited dissemination control markings come third.
Double slashes separate the groups, and a Specified category takes an SP- prefix. A government-wide banner for export-controlled data under a Specified authority, limited to federal employees and contractors, reads CUI//SP-EXPT//FEDCON.
The designation indicator says who designated the information: at minimum the agency, by letterhead or a Controlled by line. It may appear on the first page or cover alone.
DoDI 5200.48 turns the designation indicator into a fixed block of five lines. DoD practice prints a generic CUI banner at the top and bottom of each page and moves the codes into the block.
| Code | What the CUI Registry lists it as | Where Foxborne prints it |
|---|---|---|
EXPT | Export Controlled, a category marking | The CUI category line |
FEDCON | Federal Employees and Contractors Only, a limited dissemination control | The Dissemination line |
Only the designating agency may apply a limited dissemination control, and other holders need its approval. A marking also does not make information CUI. The law, regulation or government-wide policy behind the category does, and marking information that does not qualify counts as misuse.
How Foxborne places the marks#
- Controlled by
- Your organization
- Controlled by
- Your office
- CUI category
- EXPT
- Dissemination
- FEDCON
Foxborne's banner holds one word: CUI or UNCLASSIFIED. The category and the dissemination control go in the designation indicator, whose five lines match the DoDI 5200.48 block.
| Banner | Color | Designation indicator |
|---|---|---|
| CUI | Purple, #502b85, with white text | Printed on the first page of every report and case file |
| UNCLASSIFIED | Green, #007a33, with white text | Not printed |
The Marking panel describes these as the Astro UXDS banner colors used across defense systems. The banner is a fixed strip at the top of every screen, and its text repeats as the first segment of the status bar.
Classified deployments do not set their banner here. The marking dialog says so: A classified deployment sets its banner from its own accreditation, not from here.
Set the marking#
Open the Marking panel
Go to Settings. The Marking panel reads System-high marking, in the Astro UXDS banner colors used across defense systems.
Show the banner
Turn on Show the marking banner, described as Fixed at the top of every screen and repeated in the status bar. The switch applies at once, with no confirmation. The console confirms Marking banner shown, and the audit log records Changed marking with the detail Banner shown.
Fill in the designation indicator
Select Edit on Designation indicator, described as Printed on the first page of every report and case file. The Marking dialog opens with the note Applies to the banner, every report and every case file from the next render.
Field What goes in it Printed as Banner CUI or UNCLASSIFIED The banner text, top and bottom Controlled by The organization that controls the information Line 1, Controlled by Office The office that made the determination Line 2, Controlled by CUI category Every CUI category in your reports, such as EXPTLine 3, CUI category Dissemination control A limited dissemination control such as FEDCON, or a distribution statementLine 4, Dissemination Point of contact A phone number or an office mailbox Line 5, POC Save
Select Save. The console confirms Marking saved, and the banner and status bar redraw. The audit log records Changed marking on Settings, with the banner and the category as the detail, such as CUI, EXPT.
Lines one and four come from the contract
On a DoD program, line one names the DoD Component, and DCSA's marking job aid fills it with the Government Contracting Activity. For export-controlled technical information, line four holds a distribution statement letter rather than a dissemination control. Read both off the contract before the first report goes out.
DoD's marking training aid accepts an organizational email for the point of contact. It also says contractors may create and mark CUI and appear as the point of contact.
What changes when you save#
- The banner. It redraws at the top of every screen and at the start of the status bar.
- Reports. Each incident report takes the new marking at the top and bottom of the page, with the designation indicator under the top banner.
- Case files. The Export dialog shows the marking chip and a summary such as Category EXPT, FEDCON, controlled by your organization. Its hint reads L1 and L2 files carry the banner string. The case file prints it at the top and bottom of every page, with the designation indicator on the first.
- The UNCLASSIFIED case. Under UNCLASSIFIED, reports carry no designation indicator, and the export dialog reads No CUI designation.
A case file exported before the change was rendered with the old marking. Export it again if it needs the new one, as Export a case file describes.
Set the system use notice#
Open the notice
In Settings, under Marking, find System use notice, described as Shown on the sign-in page and acknowledged before every session. Select Edit.
Write the notice
The System use notice dialog notes Everyone acknowledges this before signing in. Changing it is audited. Enter the text your security office requires: the dialog refuses an empty notice.
Save
Select Save. The console confirms Saved. The audit log records Changed settings on System use notice, with the detail Text updated.
The example notice says the system holds CUI, including export-controlled technical data. It adds that use is monitored and recorded, and that access is limited to authorized US persons. On the sign-in screen the notice sits above the I understand and consent checkbox, and each acknowledgment writes Acknowledged notice to the audit log.
Check the result#
- The banner shows at the top of every screen and at the left of the status bar.
- An incident's Report tab shows the marking at the top, the designation indicator under it and the marking again at the foot.
- The Export dialog shows the marking chip and the designation summary.
- The audit log's Administration filter lists your Changed marking and Changed settings entries.
Troubleshoot#
No banner on screen. Show the marking banner is off. Turn it on in Settings.
Reports carry no designation indicator. The banner is set to UNCLASSIFIED, and the export dialog reads No CUI designation. The indicator prints only under CUI.
A report still shows the old marking. The marking applies from the next render. Open the report again.
The program needs a classified banner. Foxborne offers CUI and UNCLASSIFIED only. A classified deployment sets its banner from its own accreditation.
Next#
- Export-controlled evidence gates evidence marked EXPT by US person status.
- Markings and handling covers the handling side of the same marks.
- Export a case file shows the marking on the way out.