CHOOSING THE RIGHT TOOLS FOR HANDLING CONTROLLED UNCLASSIFIED INFORMATION (CUI)