CUI FAQ

For general information about CUI and the CMMC framework here at Washington University, please see the Controlled Unclassified Information (CUI) in Sponsored Research webpage.

If your question is not answered below or on our general information pages, please contact cui-compliance@wustl.edu.

How do I reset my password for my WUSTL Secure Enclave account?

Self-service password reset is available for WUSTL Secure Enclave accounts. Passwords for the WUSTL-Secure environment must be at least 14 characters long, and contain upper- and lower-case letters, numbers, and special characters.

Self-service password reset instructions are found here (WUSTL Key login required).

How often do I need to reset my WUSTL Secure Enclave password?

Your password will need to be reset at least every 180 days. Reset your password any time you suspect it may have been compromised.

I have a new staff member, or a staff member leaving. How do I add/remove their access to the WUSTL Secure Enclave?

For new staff members or departing staff, the PI for the project should request/remove access by submitting a service request to WashU IT. Please be sure to include that you this request concerns a CUI Research Project in the WUSTL-SEn. Access to a WUSTL-SEn account requires a special background check, and completing all required training.

I have a new phone. How do I update my 2FA authentication?

To add a new phone, you will need to call the help desk at 314-933-333. Be sure to mention that you are calling about 2FA for the WUSTL-SEn secure enclave for CUI Research!

How do I get tech help?

Please call WashU IT at 314-933-3333 or submit a help ticket online. Please mention immediately that you are calling regarding the WUSTL Secure Enclave or CUI Research Project.

If you just have a general technical question, please email cui-compliance@wustl.edu.

What is the lifecycle of CUI data?

Please see this interactive infographic for more information (Box direct download link).

How do I collaborate in the WUSTL-SEn?

You have several options for secure collaboration in the WUSTL-SEn. Please see this document for more information about the options available to you.

What if I need to use scripts in the WUSTL-SEn?

Scripts are simple text programs used by researchers as a productivity tool automating a series of steps on various programs used for analysis and testing. In the WUSTL-SEn non-compiled (non-executable) scripts can be used and generated by researchers to be used on approved executable programs – or interpreter executables – within the enclave. As long as the scripts do not contain any CUI, they may be treated as non-CUI materials and processed, transmitted, and stored as such. However, scripts must not store or retain usernames or passwords. Some scripts can be compiled into executable programs. These must be approved by the CTC or a CTC designee and installed by authorized administrators on the WUSTL-SEn. Only then can they be used by researchers within WUSTL-SEn.

What are the guidelines for CUI at WashU?

The WashU CUI Management Plan covers the general CUI guidelines. For CUI marking, the DoD CUI job aids webpage provides several resources to assist you in meeting the CUI marking requirements, including a quick reference guide for decision making and marking. Your department may have guidance specific to your area, but all CUI Marking must conform to the guidelines provided by the DoD.

A generic CUI cover sheet may be downloaded here.

More resources can be found on the CUI Training & Resources page.

Back to Controlled Unclassified Information (CUI) in Sponsored Research

Additional Information

More about CUI and the CMMC framework

Research involving Controlled Unclassified Information requires special considerations. Understanding the physical and electronic controls required is key.

Training and Resources

Working with CUI data or working in areas containing CUI requires special training. Find out about training and the resources available to help you successfully safeguard data here at the university.