CMMC
CUI (federal context)
Controlled Unclassified Information, government-created or government-owned information that requires safeguarding under law, regulation, or government-wide policy but is not classified. The National Archives CUI Registry organizes CUI into roughly 20 categories (Defense, Export Control, Privacy, and others); presence of CUI on a contractor system triggers DFARS 252.204-7012 and CMMC Level 2.
From the library
The full analysis on CUI (federal context).
The article is where the term meets the practitioner. Read how this concept actually shows up in audit, in remediation, and in the boardroom.
Read the analysis →