As enumerated by 6 CFR § 27.400(b), CVI includes, among other things:
CVI does not include, among other things, information developed and/or submitted to a government agency pursuant to a law or regulation other than CFATS (e.g., EPA RMP).
DHS no longer requires completion of a CVI Non-Disclosure Agreement, although DHS retains the right to require them (once again) in the future. However, DHS does require acceptance of CVI Affirmation Statements indicating that the user will comply with all CVI requirements. These Affirmation Statements are completed at the end of the CVI Authorized User Training.