The CUI Notice 2019-03 provides guidance on the destruction of Controlled Unclassified Information (CUI) in paper form, rescinding the previous notice from 2017. It defines the requirements outlined in Title 32 CFR Part 2002, emphasizing that CUI must be destroyed to render it unreadable, indecipherable, and irrecoverable. The notice details single-step destruction standards, such as using cross-cut shredders or pulverization, and the procurement of approved shredders listed by the National Security Agency. Additionally, it introduces a multi-step destruction process, allowing agencies to shred CUI to a lesser standard before recycling, provided the final product meets CUI specifications. The document underscores the importance of maintaining physical security for CUI until its destruction and highlights the need for proper storage and tracking procedures. The guidance aims to assist various agencies in compliance while balancing ecological concerns regarding waste paper recycling, all while ensuring decision-making autonomy for agencies on safeguarding measures. Overall, this notice encapsulates the administrative regulations for managing and destroying CUI, relevant to federal and state agencies involved in compliance and security management.

The Anniston Army Depot is seeking a contractor for the destruction of 990 boxes of records, requiring adherence to the NSA EPL shredder specifications or CUI Notice 2019-02 guidelines for Controlled Unclassified Information (CUI). The contractor must provide proof of compliance with NIST and DoD regulations, with preferred onsite destruction but potential offsite options evaluated based on equipment standards. Services are to be performed during designated business hours, and all debris from the shredding process must be properly disposed of in provided dumpsters. Access to the depot requires background checks and vehicle inspections, and contractors must obtain a visitor badge upon entry. The government will facilitate access to the destruction site through a Directorate of Information Management Technician and requires a written scope of work changes from the Contracting Officer. This RFP underlines strict compliance measures for document security, emphasizing the importance of confidentiality and regulatory adherence in the records destruction process.