APPLICABILITY/ACCOUNTABILITY:

This standard applies to all IST, School of Modeling, Simulation, & Training (IST‐SMST) students, employees and others who use IST-SMST information systems.

STANDARD:

All removable media produced by IST‐SMST personnel or devices used in any IST-SMST managed system, must be marked with an identifiable owner, and when highly restricted the label will also reflect CONTROLLED or CUI to reflect the presence of such data. Proper identification will reflect either the
employee’s name (lastname, or first initial + last name), lab, or project name on the standard label under “Belongs To:”.

1. General Purpose: System or Media Does NOT Contain Highly Restricted Data. For use with IST-SMST systems or removable media that do not contain highly restricted data, such as Controlled Unclassified Information (CUI) and where the system or media is not authorized to process such controlled data.
   
   
   • White Label, for systems and media.
     • Size Small, such as for a USB stick (Avery label 8195): Download Small Labels
     • Size Medium, such as for a portable hard drive (Avery label 5160): Download Medium Labels
     • Size Large (Avery label 5163): Download Large Labels


2. Controlled Use: System or Media Contains Highly Restricted Data (such as Controlled Unclassified Information (CUI)). All information systems and media both digital and non‐digital (e.g., USB drives, CD/DVDs, diskettes, systems, hard drives, paper, filing cabinets, etc.) must be marked to make the presence of CUI known. Due to space limitations, it may not be possible to include the full CUI Category, Subcategory, or Limited Dissemination Control Markings. In these cases, minimally mark media with “CONTROLLED” or “CUI” and the name of the designating organization (e.g., IST-SMST, or IST, School of Modeling, Simulation & Training), as reflected in the standardized labels provided and examples from the National Archives and Records Administration Marking Handbook. If a label cannot be used due to size limitations or the type of media (such as CD/DVD), use a sharpie marker to write this information.
   
   
   • Purple System Label. For use by the IST-SMST Help Desk upon authorization of a system to process and contain controlled unclassified information.
   
   
   • Purple Media Label.
     • ​Size Small, such as for a USB stick (Avery label 8195): Download Small Labels
     • Size Medium, such as for a portable hard drive (Avery label 5160): Download Medium Labels
     • Size Large (Avery label 5163): Download Large Labels
   
   
   • Emails.
     • ​Subject must alert recipient to presence of CUI. Include words: [Contains CUI].
     • Entire email must be sent encrypted IF content of message includes CUI.
     • Email may be sent as normal email if message body does not contain CUI, but attachments containing CUI must be encrypted.
   
   
   • Coversheet. If a coversheet is required as a shield to protect CUI and to identify the presence of CUI, the CUI EA‐approved coversheet, Standard Form 901 shall be used.
   
   
   • Printed Materials and all other items. The guidelines in the National Archives and Records Administration Marking Handbook are to be followed for all markings as applicable for document and/or medium used.

IST-SMST Label Examples:

Labels may be printed from templates provided or obtained from the Help Desk.

NOTE: Do NOT use either label above on CD/DVD/Blu‐Ray discs. Use a sharpie to write the required information, so as not to unbalance the disc or cause drive failure. Alternatively, an Avery label for this media may be used: https://www.avery.com/products/labels/usage/cd-~-dvd-labels-~-inserts