Marking CUI

If you don't identify the CUI, how can you expect to protect the CUI?