UMD's Controlled Unclassified Information Environment (CUIE)

UMD's Controlled Unclassified Information Environment (CUIE) is a secure computing and data enclave that adheres to all 110 NIST SP 800-171 controls. The system is logically and physically separated from other computing environments, outbound network access is blocked by default, and all data uploaded to the CUIE is encrypted using end-user specific private keys. Once inside the system, the data is limited only to collaborators who have specifically been authorized by the data owner. Data is analyzed on Virtual Machines and encrypted storage within the enclave. Connection to the system uses a specially designed application and is secured via a TLS tunnel from the end-user machine to the VM that uses public keys and private keys to create a secure channel key that cannot be snooped by any other party, including admins.

Data in the CUIE is encrypted at rest, and accessing data or virtual machines in the environment uses an end-to-end encrypted connection.

The CUIE has multiple systems logging data for security monitoring and auditing purposes.

The CUIE is also approved for data subject to ITAR and Export Control rules.

---