
Level 5: Controlled Unclassified Information
Level 5 accommodates CUI that requires a higher level of protection as
deemed necessary by the information owner, public law, or other
government regulations. Level 5 also supports unclassified National
Security Systems (NSSs) due to the inclusion of NSS specific requirements
in the FedRAMP+ controls/control enhancements (C/CEs).
As such, NSS must be implemented at Level 5 or higher.
​
Is the data/information unclassified information that under law or policy requires protection from unauthorized disclosure as described above and established by Executive Order 13556 (November 2010) or other mission critical data that must be held at a higher level than Level 4?
A “No” here suggests that the data/information is classified SECRET and therefore has to be held at a higher level than Level 5