(a) The CUI EA maintains the CUI Registry, which:

(1) Is the authoritative central repository for all guidance, policy, instructions, and information on CUI (other than the Order and this part);

(2) Is publicly accessible;

(3) Includes authorized CUI categories and subcategories, associated markings, applicable decontrolling procedures, and other guidance and policy information; and

(4) Includes citation(s) to laws, regulations, or Government-wide policies that form the basis for each category and subcategory.

(b) Agencies and authorized holders must follow the instructions contained in the CUI Registry in addition to all requirements in the Order and this part.