Register:Glossary3 recordsSHA3-256 chainedhead sha3:52eff920c3863dc1274db389b0d00ef974afa03ad2d2a27e37c1b6b83158473fIntact
REC 0001DEFINITIONsha3-256244328c2bd3cb73159e77cb312d1a768f7de75cea68aed09acb94d0fd934b957prev:dfd33846de01

A CUI enclave is a deliberately scoped environment (often a dedicated cloud tenant or GCC High environment) where all CUI is stored, processed, and transmitted. Everything outside the enclave stays out of assessment scope.

Enclaves are the dominant cost-control strategy: rather than bringing an entire corporate network up to 110 controls, a contractor secures a much smaller boundary. Enclave seats commonly run $150–$300 per user per month.

Over-scoping — failing to segment CUI into an enclave — is the most common reason small contractors overspend on CMMC.

REC 0002RELATED RECORDSsha3-25652eff920c3863dc1274db389b0d00ef974afa03ad2d2a27e37c1b6b83158473fprev:244328c2bd3c

Related records

Guides and articles describe the work. The evidence that work produces is described in three proof pages and one architecture page.

proof.state
Proof of State. What the environment was, as of a date someone else picks: point-in-time records, content hashed and chained.
proof.change
Proof of Change. Who or what altered the environment, under what authority, with before and after state hashes.
proof.agency
Proof of Agency. What a machine was permitted to do before it acted, what it did, and what would have stopped it.
architecture
Architecture. How the chain is built and where it lives: inside your tenant, with no egress of evidence.

Related terms and reading

  1. CUI: Controlled Unclassified InformationCUI is government-created or -owned information that requires safeguarding under law, regulation, or government-wide policy, but is not classified.
  2. NIST SP 800-171NIST SP 800-171 is the federal standard of 110 security controls for protecting CUI in non-federal systems: the technical basis of CMMC Level 2.
  3. DFARS 252.204-7012DFARS 7012 is the long-standing clause requiring contractors to safeguard covered defense information per NIST 800-171 and report cyber incidents within 72 hours.
  4. CMMC Cost Calculator

Know the term. Then see the record behind it.

Request AccessBook a call
Sealed
Last amended
Register colophonRecomputable by a second party
SeqLabelSHA3-256Prev
REC 0000HEADdfd33846de01b3097dbe21b8
REC 0001DEFINITION244328c2bd3cdfd33846de01
REC 0002RELATED RECORDS52eff920c386244328c2bd3c

The record headers on this page are SHA3-256 digests of this page's own copy, chained in sequence from a fixed genesis value. Edit one word of any record's copy above and every digest after it changes. Head of chain: sha3:52eff920c386. The product does the same thing to your evidence.