CUI Enclave for CMMC Decision Tool

This quick 17-question enclave assessment tool helps you figure out if an enclave could reduce your compliance scope, cut long-term costs, and simplify your CMMC strategy. If you’re handling CUI and weighing your options, this is a great place to start.

This tool was created by an experienced engineer at a top-5 regional managed IT services provider, based on our experience helping more than 20 organizations toward CMMC compliance.

For a fuller discussion of the pros and cons of CUI enclaves, see our article CUI enclaves in CMMC compliance: Are they right for your business?

Could a CMMC enclave save you time and money? Take the test

Step 1 of 4

Step 1: Understand how you handle CUI

This self-assessment helps you figure out whether a Controlled Unclassified Information (CUI) enclave is a practical solution for your organization. Answer each question with Yes or No. At the end, tally your score to see where you stand.
1. Are CUI users a small subset of your organization—for example, one department or less than 10% of your total team?
Why it matters: Enclaves work best when the ratio of CUI users is small. Isolation is easier.
2. Can you keep all CUI activity inside one secure tool or workspace, like a special folder, app, or virtual desktop?
Why it matters: Contained workflows are easier to lock down and monitor.
3. Do users need to access CUI from mobile devices like phones or tablets?
Why it matters: Enclaves typically don’t support mobile access well, which can frustrate users.
4. Do your users handle only one type or category of CUI (e.g., DoD contracts)?
Why it matters: Multiple categories with different rules add complexity and reduce the effectiveness of a single enclave setup.
This field is hidden when viewing the form