What types of data require protection under CMMC 2.0?

CMMC 2.0 requires organizations to protect controlled unclassified information (CUI) as well as Federal Contract Information (FCI). Contractors use cybersecurity risk management software and CMMC software to secure this data. Protecting CUI data ensures defense contractors comply with the Department of Defense (DOD) mandates and reduce risks to national security.