Asset categories
Classify CUI assets, security protection assets, contractor risk managed assets, and out-of-scope systems.
Use this request page when the first problem is knowing where CUI moves, what assets belong in scope, and what questions need to be resolved before remediation work starts.
Defense contractors that handle or may handle CUI and need a practical starting point for asset categories, CUI movement, boundary assumptions, and inherited service questions.
A representative view of the working areas this asset helps organize.
Classify CUI assets, security protection assets, contractor risk managed assets, and out-of-scope systems.
Capture how controlled information moves through storage, collaboration, endpoints, and supplier handoffs.
Document assumptions, inherited responsibilities, candidate exclusions, and decisions that need owner approval.
Bring a cleaner intake to a scope call so the conversation starts with facts instead of a blank page.
Get help turning the pack into a defensible boundary and next-step plan.
Use the browser tool to generate a first-pass scope summary before requesting the pack.
Read the concepts behind the scope categories and boundary decisions.
Explore the CMMC Consulting Hub, browse the template index, open the tools hub, or review the consulting path.