Security and OGELs Reminder
Date: 12 October 2011
Several US unclassified security descriptors require handling as RESTRICTED in the UK. These include: "Sensitive But Unclassified" (SBU), "For Official Use Only" (FOUO) and "Controlled Unclassified Information" (CUI).
The OGEL risk in this regard lies in intangible technology transfers, where licence conditions require approved encryption and clearance from a government accreditation authority in order to export RESTRICTED data.
Failure to recognise these descriptors as equating to RESTRICTED in the UK can result in a breach of both security and export licensing requirements.
