Explain the key differences between CUI Assets and Contractor Risk Managed Assets (CRMAs).

1. CUI Assets are those that process, store, or transmit Controlled Unclassified Information (CUI), while CRMAs are assets that can potentially handle CUI but are not intended to due to implemented security policies, procedures, and practices. CUI Assets are always assessed against all CMMC requirements, whereas CRMAs are only assessed if documentation is insufficient or raises concerns.

Saki2024-11-07T20:06:06-05:00November 7, 2024|CMMC 2.0|