The CUI Handling Policy directly relates to several CMMC domains, such as Access Control (AC), Media Protection (MP), Physical Protection (PE), and Systems and Communications Protection (SC). It provides guidelines and procedures for how CUI should be securely accessed, stored (both physically and digitally), shared, and transmitted, ensuring adherence to the practices and processes outlined in these domains, including encryption standards, secure communication channels, and secure disposal of CUI. Supporting documents in this collection define different types of data and handling requirements specific to the organization. They also provide spillage handling requirements and outline procedures for review of information prior to posting on public websites.