sensitive information

{
  "id": "MLC-T-CYB-003892",
  "term": "sensitive information",
  "field": "Cybersecurity",
  "definition": "1. Information where the loss, misuse, or unauthorized access or modification could adversely affect the national interest or the conduct of federal programs, or the privacy to which individuals are entitled under 5 U.S.C. Section 552a (the Privacy Act); that has not been specifically authorized under criteria established by an Executive Order or an Act of Congress to be kept classified in the interest of national defense or foreign policy.\n\n2. Information, the loss, misuse, or unauthorized access to or modification of, that could adversely affect the national interest or the conduct of federal programs, or the privacy to which individuals are entitled under 5 U.S.C. Section 552a (the Privacy Act), but that has not been specifically authorized under criteria established by an Executive Order or an Act of Congress to be kept classified in the interest of national defense or foreign policy.\n\n3. See controlled unclassified information (CUI).\nNote: The term sensitive information as well as others such as For Official Use Only (FOUO) and Sensitive But Unclassified (SBU) will no longer be used upon implementation of 32 CFR 2002.\n\n4. Sensitive but unclassified information.",
  "see_also": [
    "controlled unclassified information (CUI)"
  ],
  "references": [
    "NIST SP 800-53 Rev. 4 [Superseded] from CNSSI 4009 (Adapted)",
    "NIST SP 800-150 from NISTIR 7298 Rev. 2",
    "CNSSI 4009-2015",
    "NIST SP 800-175B Rev. 1",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/sensitive-information/"
}