Protecting CUI While Reducing Compliance Burden The Department of Defense (DoD) faces a difficult balancing act. On one hand, it must ensure that every organization handling Controlled Unclassified Information (CUI) maintains a mature and effective cybersecurity program capable of protecting sensitive defense information from increasingly sophisticated cyber threats. On the other hand, the Department has recognized that cybersecurity compliance has become increasingly expensive, complex, and time-consuming—particularly for the small and medium-sized businesses that make up much of the Defense Industrial Base (DIB). The Cybersecurity Maturity Model Certification (CMMC) program was created to provide independent verification that contractors are implementing the security [...]