CUI FAQ
For general information about CUI and the CMMC framework here at Washington University, please see the Controlled Unclassified Information (CUI) in Sponsored Research webpage.
If your question is not answered below or on our general information pages, please contact cui-compliance@wustl.edu.
Self-service password reset is available for WUSTL Secure Enclave accounts. Passwords for the WUSTL-Secure environment must be at least 14 characters long, and contain upper- and lower-case letters, numbers, and special characters.
Self-service password reset instructions are found here (WUSTL Key login required).
Your password will need to be reset at least every 180 days. Reset your password any time you suspect it may have been compromised.
For new staff members or departing staff, the PI for the project should request/remove access by submitting a service request to WashU IT. Please be sure to include that you this request concerns a CUI Research Project in the WUSTL-SEn. Access to a WUSTL-SEn account requires a special background check, and completing all required training.
To add a new phone, you will need to call the help desk at 314-933-333. Be sure to mention that you are calling about 2FA for the WUSTL-SEn secure enclave for CUI Research!
Please call WashU IT at 314-933-3333 or submit a help ticket online. Please mention immediately that you are calling regarding the WUSTL Secure Enclave or CUI Research Project.
If you just have a general technical question, please email cui-compliance@wustl.edu.
Please see this interactive infographic for more information (Box direct download link).
You have several options for secure collaboration in the WUSTL-SEn. Please see this document for more information about the options available to you.
Scripts are simple text programs used by researchers as a productivity tool automating a series of steps on various programs used for analysis and testing. In the WUSTL-SEn non-compiled (non-executable) scripts can be used and generated by researchers to be used on approved executable programs – or interpreter executables – within the enclave. As long as the scripts do not contain any CUI, they may be treated as non-CUI materials and processed, transmitted, and stored as such. However, scripts must not store or retain usernames or passwords. Some scripts can be compiled into executable programs. These must be approved by the CTC or a CTC designee and installed by authorized administrators on the WUSTL-SEn. Only then can they be used by researchers within WUSTL-SEn.
The WashU CUI Management Plan covers the general CUI guidelines. For CUI marking, the DoD CUI job aids webpage provides several resources to assist you in meeting the CUI marking requirements, including a quick reference guide for decision making and marking. Your department may have guidance specific to your area, but all CUI Marking must conform to the guidelines provided by the DoD.
A generic CUI cover sheet may be downloaded here.
More resources can be found on the CUI Training & Resources page.
Back to Controlled Unclassified Information (CUI) in Sponsored Research
Additional Information
More about CUI and the CMMC framework
Research involving Controlled Unclassified Information requires special considerations. Understanding the physical and electronic controls required is key.
Training and Resources
Working with CUI data or working in areas containing CUI requires special training. Find out about training and the resources available to help you successfully safeguard data here at the university.