Understanding what CUI you actually have is one of the biggest challenges organizations face when working toward CMMC.
Many contractors are told their contract contains CUI … but they aren’t told:
- Which *specific* information is CUI
- What category of CUI it falls into
- Or what might actually be public information
Without understanding this, it’s easy to treat everything as CUI and blow up your CMMC scope to include everything in your environment.
To help break down this challenge, I recorded a short video walking through how designation guidance can help organizations understand what types of information they have so they know how to protect it.
If you’re working through CMMC and trying to understand the CUI in your contracts, this may be helpful!
Author
Share
Connect with our team to gain the insight and guidance needed to move forward with confidence.