Management Advisory: DoD Policy and Training on Dissemination Controls for Controlled Unclassified Information

Title Full

Date Issued

Thursday, January 29, 2026

Submitting OIG

Department of Defense OIG

Agencies Reviewed/Investigated

Department of Defense

Report Number

DODIG-2026-047

Report Type

Inspection / Evaluation

Agency Wide

Yes

Number of Recommendations

Questioned Costs

Funds for Better Use

Report updated under NDAA 5274

Open Recommendations

This report has 3 open recommendations.

Recommendation Number	Significant Recommendation	Recommended Questioned Costs	Recommended Funds for Better Use
D-2026-2047-DEV0PC-0001-0001.b.1	No	$0	$0
(U) Rec. 1.b.1: The DoD OIG recommended that the Under Secretary of Defense for Intelligence and Security update DoD Instruction 5200.48, Controlled Unclassified Information (CUI) to clarify the implications of using the limited dissemination controls of Federal Employees and Contractors Only (FEDCON) and Federal Employees Only (FED ONLY) for releasability outside the Executive Branch and emphasize the use of limited dissemination controls by exception, with a limited dissemination control of None as the default option unless required otherwise.
D-2026-2047-DEV0PC-0001-0001.b.2	No	$0	$0
(U) Rec. 1.b.2: The DoD OIG recommended that the Under Secretary of Defense for Intelligence and Security update Defense Office of Prepublication and Security Review 25-P-0275 to clarify the implications of using the limited dissemination controls of Federal Employees and Contractors Only (FEDCON) and Federal Employees Only (FED ONLY) for releasability outside the Executive Branch and emphasize the use of limited dissemination controls by exception, with a limited dissemination control of None as the default option unless required otherwise.
D-2026-2047-DEV0PC-0001-0001.b.3	No	$0	$0
(U) Rec. 1.b.3: The DoD OIG recommended that the Under Secretary of Defense for Intelligence and Security update Center for Development of Security Excellences DoD Mandatory CUI Training course to clarify the implications of using the limited dissemination controls of Federal Employees and Contractors Only (FEDCON) and Federal Employees Only (FED ONLY) for releasability outside the Executive Branch and emphasize the use of limited dissemination controls by exception, with a limited dissemination control of None as the default option unless required otherwise.