What type of information does this personnel roster represent?

The answer

A personnel roster represents Controlled Unclassified Information (CUI).

Although a roster is not classified (Confidential, Secret, or Top Secret), it is also not freely releasable. It contains personally identifiable information (PII) — names, ranks, duty assignments, and often contact or identifying details. Under DoD policy, PII is a category that requires safeguarding and dissemination controls, which is exactly what makes information CUI. So the correct classification is CUI, not merely "unclassified."

Why it is CUI and not just unclassified

This is the distinction the quiz is testing. "Unclassified" is often misread as "public" or "no controls needed." In reality:

• Classified information is national-security information (Confidential/Secret/Top Secret) that could damage the nation if disclosed.
• CUI is unclassified information that still requires protection under law, regulation, or government-wide policy — for example, PII, financial records, or export-controlled data.
• Uncontrolled / public unclassified information genuinely needs no safeguards (a public press release).

A personnel roster falls in the middle bucket. Its PII could be misused for identity theft, targeting, or social engineering, so it must be marked, handled, and stored with CUI controls — even though nothing in it is a national-security secret.

Ruling out the distractors

• "Unclassified" (uncontrolled) is wrong because it implies no handling requirements. The PII on a roster legally requires safeguards, so it cannot be treated as freely shareable.
• "Classified" is wrong because a roster does not contain national-security information whose disclosure would damage the country; it is not marked Secret or Top Secret.
• "Public information" is wrong for the same reason as uncontrolled unclassified — PII is never public by default.

The bigger picture: marking and handling CUI

CUI replaced older labels like FOUO (For Official Use Only) as the government-wide standard. Practical handling rules for a CUI personnel roster include:

• Marking: apply a "CUI" designation, typically in the header/footer and often a designation indicator identifying the office and category (e.g., CUI//PRVCY).
• Storage: keep it in access-controlled systems or locked containers; encrypt when stored or transmitted electronically.
• Sharing: release only to people with a lawful government purpose (need-to-know), never posted to public sites or open shares.
• Destruction: shred or securely wipe when no longer needed.

Recognizing that everyday documents like rosters, recall lists, and contact sheets are CUI is the core lesson — the information is sensitive because of the PII it carries, not because it is secret.