“ Each agency head shall, within 180 days of the date of this order: (1) review all categories, subcategories, and markings used by the agency to designate unclassified information for safeguarding or dissemination controls; and (2) submit to the Executive Agent a catalogue of proposed categories and subcategories of CUI, and proposed associated markings for information designated as CUI under section 2 (a) of this order. ”