{"data":{"id":"us/32-cfr-2002.54","jurisdiction":"us","citation":"32 CFR 2002.54","heading":"Misuse of CUI.","body":"(a) The CUI SAO must establish agency processes and criteria for reporting and investigating misuse of CUI.\n(b) The CUI EA reports findings on any incident involving misuse of CUI to the offending agency's CUI SAO or CUI Program manager for action, as appropriate.","path":["Title 32—National Defense","Subtitle B—Other Regulations Relating to National Defense","CHAPTER XX—INFORMATION SECURITY OVERSIGHT OFFICE, NATIONAL ARCHIVES AND RECORDS ADMINISTRATION","PART 2002—CONTROLLED UNCLASSIFIED INFORMATION (CUI)","Subpart C—CUI Program Management"],"source_url":"https://www.ecfr.gov/api/versioner/v1/full/2026-08-25/title-32.xml","current_through":"2026-08-25","vintage":"","retrieved_at":"2026-08-27T02:25:30Z","sha256":"0d688b552b8397d3b4c0ce5dbef57ae3544f3dfa8a0f507bb1a716002a634a9d","source_id":"us-cfr","stale":true,"prev":"us/32-cfr-2002.52","next":"us/32-cfr-2002.56"},"notice":"GroundRules: Original legal text. Not legal advice."}