DefenseLogix
Start a conversation
Government / CMMC Readiness / CUI Scope Planner
Free planning tool · About 5 minutes

Scope your CUI before you buy GCC High.

Answer about a dozen multiple-choice questions and get a preliminary scoping report: what is likely in scope, what to check first, and which ways of handling Controlled Unclassified Information (CUI) fit your situation. It's free: enter your work email at the end to see the full report and get an editable scope worksheet.

Start the planner How it works

What you get

  • Where you stand: an FCI or CUI pathway from your answers, and what it means for you.
  • Findings in priority order, each with why it matters, what to check and the regulation behind it.
  • Your next steps, and the ways to handle CUI (an enclave, a government cloud, or your current systems) with their tradeoffs.
  • Your likely assets sorted into the CMMC scoping categories, to confirm.
  • A report you can print or save as a PDF, with a dated CMMC status box.
  • An editable scope worksheet in Word: an asset inventory, a CUI data-flow map, questions for your IT provider and a request letter for your prime.

Built for small and midsize defense contractors and suppliers deciding how to handle CUI: before a GCC High or enclave purchase, after a prime's cybersecurity questionnaire, or ahead of an SPRS score update.

Sharing this with your team? Download the two-page brochure (PDF)

Questions

Before you start.

No. It is planning guidance. It does not assess compliance, compute an SPRS score or determine your CMMC level; your contract sets the level. DefenseLogix provides readiness and advisory support and does not perform CMMC certification assessments.
Yes, a work email at the end. Once you've answered the questions you'll see your pathway and the titles of any findings; your email unlocks the full report, printing and the editable scope worksheet. We may follow up once by email, and we send CMMC rule updates only if you ask for them. Your email and company don't carry any of your answers.
They stay in your browser tab while you use the planner and are erased when you close the tab or choose Start over. We receive a five-item summary (your pathway, the number of people who handle CUI, your timeline, export-controlled data and SPRS status) only if you tick the box to attach it to a call request.
The rules were last reviewed on October 17, 2026, after the July 2026 suspension of CMMC Phase 2. Every report shows its review date and warns you when it is more than 30 days old.

Planning guidance only. Not a CMMC assessment, SPRS score, certification or legal advice; your contract sets your CMMC level. Not reviewed or endorsed by the Department of War or The Cyber AB.

Start the planner