--- title: CUI Remediation & Spillage Monitoring | Teramis description: Act on validated CUI findings with controlled movement, verification, and documentation your team can use for compliance records. --- [Skip to content](https://teramis.us/solutions/cui-remediation-spillage-monitoring#main-content) [![Teramis Logo](https://teramis.us/hs-fs/hubfs/Untitled%20design%20-%202026-07-20T135654.427.png?width=3000&height=2000&name=Untitled%20design%20-%202026-07-20T135654.427.png)Homepage](https://teramis.us?hsLang=en-us) - [Home](https://teramis.us?hsLang=en-us) - [Platform](https://teramis.us/platform?hsLang=en-us) - [How Teramis Works](https://teramis.us/company/how-teramis-works?hsLang=en-us) - [CUI Discovery](https://teramis.us/platform/cui-discovery?hsLang=en-us) - [Evidence & Validation](https://teramis.us/platform/evidence-validation?hsLang=en-us) - [Ongoing Monitoring](https://teramis.us/platform/ongoing-cui-monitoring?hsLang=en-us) - [Remediation](https://teramis.us/platform/remediation?hsLang=en-us) - [Deployment & Data Sources](https://teramis.us/platform/deployment-and-data-sources?hsLang=en-us) - [Who We Help](https://teramis.us/who-we-help?hsLang=en-us) - [Solutions](https://teramis.us/solutions?hsLang=en-us) - By Decision - [CUI Scoping](https://teramis.us/solutions/cmmc-scoping?hsLang=en-us) - [CUI Boundary Validation](https://teramis.us/solutions/cui-boundary-validation?hsLang=en-us) - [CUI Remediation & Spillage Monitoring](https://teramis.us/solutions/cui-remediation-spillage-monitoring) - [Migration Support](https://teramis.us/solutions/migration-support?hsLang=en-us) - [Post-Incident CUI Scoping](https://teramis.us/solutions/post-incident-cui-scoping-and-discovery-teramis?hsLang=en-us) - [Supply Chain and M&A](https://teramis.us/solutions/supply-chain-ma?hsLang=en-us) - By Organization - [Small Business](https://teramis.us/solutions/by-organization/small-business?hsLang=en-us) - [Enterprise](https://teramis.us/solutions/by-organization/enterprise?hsLang=en-us) - [Government](https://teramis.us/solutions/government-agencies?hsLang=en-us) - [Compliance Advisors](https://teramis.us/solutions/by-organization/compliance-advisors?hsLang=en-us) - [Partners](https://teramis.us/partners?hsLang=en-us) - [Partner Program](https://teramis.us/partners/partner-program?hsLang=en-us) - [Partner Resources](https://teramis.us/partners/partner-resources?hsLang=en-us) - [Who We Partner With](https://teramis.us/partners/who-we-partner-with?hsLang=en-us) - [Partner MSPs & MSSPs](https://teramis.us/partners/who-we-partner-with?hsLang=en-us#MSPs-MSSPs) - [Compliance Advisors & Consultants](https://teramis.us/partners/who-we-partner-with?hsLang=en-us#CMMCAdvisoryandRPOs) - [GRC and Enclave Providers](https://teramis.us/partners/who-we-partner-with?hsLang=en-us#GRC-EnclaveProviders) - [Technology Partners](https://teramis.us/partners/who-we-partner-with?hsLang=en-us#TechnologyPartners) - [Become a Partner](https://teramis.us/partners/become-a-partner?hsLang=en-us) - [Resources](https://teramis.us/resources?hsLang=en-us) - [FAQ](https://teramis.us/resources/faqs?hsLang=en-us) - [Videos & Webinars](https://teramis.us/resources/videos-webinars?hsLang=en-us) - [Resource Library & Downloads](https://teramis.us/resources/library?hsLang=en-us) - [Blog](https://teramis.us/teramis-blog?hsLang=en-us) - [Company](https://teramis.us/company?hsLang=en-us) - [About Us](https://teramis.us/company/about?hsLang=en-us) - [Use Cases](https://teramis.us/use-cases?hsLang=en-us) - [FAQ](https://teramis.us/resources/faqs?hsLang=en-us) - [Careers](https://teramis.us/company/careers?hsLang=en-us) - [Contact](https://teramis.us/contact-us?hsLang=en-us) [Request Demo](https://teramis.us/request-a-demo?hsLang=en-us) - [Home](https://teramis.us?hsLang=en-us) - [Platform](https://teramis.us/platform?hsLang=en-us) - [How Teramis Works](https://teramis.us/company/how-teramis-works?hsLang=en-us) - [CUI Discovery](https://teramis.us/platform/cui-discovery?hsLang=en-us) - [Evidence & Validation](https://teramis.us/platform/evidence-validation?hsLang=en-us) - [Ongoing Monitoring](https://teramis.us/platform/ongoing-cui-monitoring?hsLang=en-us) - [Remediation](https://teramis.us/platform/remediation?hsLang=en-us) - [Deployment & Data Sources](https://teramis.us/platform/deployment-and-data-sources?hsLang=en-us) - [Who We Help](https://teramis.us/who-we-help?hsLang=en-us) - [Solutions](https://teramis.us/solutions?hsLang=en-us) - By Decision - [CUI Scoping](https://teramis.us/solutions/cmmc-scoping?hsLang=en-us) - [CUI Boundary Validation](https://teramis.us/solutions/cui-boundary-validation?hsLang=en-us) - [CUI Remediation & Spillage Monitoring](https://teramis.us/solutions/cui-remediation-spillage-monitoring) - [Migration Support](https://teramis.us/solutions/migration-support?hsLang=en-us) - [Post-Incident CUI Scoping](https://teramis.us/solutions/post-incident-cui-scoping-and-discovery-teramis?hsLang=en-us) - [Supply Chain and M&A](https://teramis.us/solutions/supply-chain-ma?hsLang=en-us) - By Organization - [Small Business](https://teramis.us/solutions/by-organization/small-business?hsLang=en-us) - [Enterprise](https://teramis.us/solutions/by-organization/enterprise?hsLang=en-us) - [Government](https://teramis.us/solutions/government-agencies?hsLang=en-us) - [Compliance Advisors](https://teramis.us/solutions/by-organization/compliance-advisors?hsLang=en-us) - [Partners](https://teramis.us/partners?hsLang=en-us) - [Partner Program](https://teramis.us/partners/partner-program?hsLang=en-us) - [Partner Resources](https://teramis.us/partners/partner-resources?hsLang=en-us) - [Who We Partner With](https://teramis.us/partners/who-we-partner-with?hsLang=en-us) - [Partner MSPs & MSSPs](https://teramis.us/partners/who-we-partner-with?hsLang=en-us#MSPs-MSSPs) - [Compliance Advisors & Consultants](https://teramis.us/partners/who-we-partner-with?hsLang=en-us#CMMCAdvisoryandRPOs) - [GRC and Enclave Providers](https://teramis.us/partners/who-we-partner-with?hsLang=en-us#GRC-EnclaveProviders) - [Technology Partners](https://teramis.us/partners/who-we-partner-with?hsLang=en-us#TechnologyPartners) - [Become a Partner](https://teramis.us/partners/become-a-partner?hsLang=en-us) - [Resources](https://teramis.us/resources?hsLang=en-us) - [FAQ](https://teramis.us/resources/faqs?hsLang=en-us) - [Videos & Webinars](https://teramis.us/resources/videos-webinars?hsLang=en-us) - [Resource Library & Downloads](https://teramis.us/resources/library?hsLang=en-us) - [Blog](https://teramis.us/teramis-blog?hsLang=en-us) - [Company](https://teramis.us/company?hsLang=en-us) - [About Us](https://teramis.us/company/about?hsLang=en-us) - [Use Cases](https://teramis.us/use-cases?hsLang=en-us) - [FAQ](https://teramis.us/resources/faqs?hsLang=en-us) - [Careers](https://teramis.us/company/careers?hsLang=en-us) - [Contact](https://teramis.us/contact-us?hsLang=en-us) [Request Demo](https://teramis.us/request-a-demo?hsLang=en-us) CUI REMEDIATION & SPILLAGE MONITORING # You found CUI in the wrong place. Now prove you fixed it. Discovery tells you where Controlled Unclassified Information actually lives. Validation confirms which findings are real. Remediation changes the environment, and that work needs a clear record. Teramis supports controlled remediation of validated CUI findings, including movement to authorized destinations, verified transfers, removal or tombstoning of unauthorized copies, and the manifests and logs that show what happened. [Request a Demo](https://teramis.us/request-a-demo?hsLang=en-us)[Request a CUI Discovery Call](https://teramis.us/cui-discovery-readiness-assessment-teramis?hsLang=en-us) Cleanup without documentation is just movement.  A SEQUENCE, NOT A CLEANUP SPRINT ## From Validated Finding to Documented Outcome 1. **Start from validated findings:** Remediation begins with findings that have been reviewed, not with raw scan output. 2. **Confirm the authorized destination:** Your organization defines where CUI is supposed to live. 3. **Approve the action:** Your team decides which findings are remediated, in what order, and on what schedule. 4. **Move the data with verification:** Identified CUI can move from file systems, SharePoint, and OneDrive into authorized destinations with transfer verification. 5. **Handle the source location:** Once a transfer is verified, unauthorized source files can be removed or replaced with tombstones as approved. 6. **Capture conflicts and failures:** File conflicts and unsuccessful transfers are reported. 7. **Produce the record:** Transfer manifests and logs document what moved, where it went, and what happened to the source. 8. **Re-scan to confirm:** Run discovery again against the same sources to confirm the environment now matches the intended boundary. [See How Remediation Works in the Platform →](https://teramis.us/platform/remediation?hsLang=en-us) A CLEAR DIVISION OF RESPONSIBILITY ## Teramis Performs Approved Actions. Your Organization Sets the Policy. Your organization is responsible for approving remediation actions, defining authorized destinations for CUI, applying compliance policy, and making final CUI handling decisions. Teramis supports the execution and the record by moving approved data, verifying transfers, reporting conflicts, and producing manifests, logs, and evidence of the activity. Teramis executes what you approve and documents what it did. After discovery, before the assessment ## Findings Are Only Useful if Something Happens Next A discovery or boundary validation effort can produce a list of places where CUI exists outside approved locations. The next step is deciding what changes in the environment and how that change will be documented. Remediation is where a CUI program becomes more defensible. 01 No one is certain which findings are real and which are false positives. 02 No one has agreed where the data is supposed to go instead. 03 Moving files by hand across repositories is slow and easy to get wrong. 04 Copies get left behind in the source location. 05 Nobody can produce a record of what was moved, when, or by whom. 06 The next scan finds the same issues again. Acting on bad data creates new problems ## Remediation Should Not Start With Guesswork When CUI appears outside approved locations, your team needs to know what was found, where it lives, whether it belongs there, and what should happen to it. Teams act on false positives and move data that did not need moving. CUI remains outside the approved boundary because a finding was missed. Files are moved without documentation that shows what changed. Unauthorized copies remain in the source location after a partial move. Remediation activity does not produce anything useful for assessment evidence. Leadership cannot tell whether the boundary improved. Teramis connects validated findings to controlled remediation activity and a documented record of the result. The situations that bring teams here ## Common Remediation Triggers 01 ### CUI Outside Approved Locations Validated CUI in unauthorized repositories, file systems, SharePoint, or OneDrive needs to move into approved destinations. 02 ### Boundary Exceptions Validation showed the actual CUI footprint does not match the documented boundary. [Explore CUI Boundary Validation →](https://teramis.us/solutions/cui-boundary-validation?hsLang=en-us) 03 ### CUI Spillage Response Misplaced CUI needs authorized copies moved, unauthorized copies removed, and the activity documented. [Explore Spillage Monitoring →](https://teramis.us/solutions/spillage-monitoring?hsLang=en-us) 04 ### Pre-Assessment Cleanup Resolve validated CUI issues before self-assessment or review. 05 ### Enclave and Migration Projects Move CUI into the secure environment and confirm nothing was left behind in the source. 06 ### Partner-Led Remediation MSPs, MSSPs, and compliance advisors need a repeatable workflow for helping clients act on validated findings. Document what changed ## Turn Remediation Activity Into a Clear Record Create a reviewable record of what was identified, what action occurred, and whether the intended result was achieved. File-level CUI findings Repository and location details Destination movement records Hash comparison verification Tombstone activity Transfer manifests Remediation logs File conflict and unsuccessful transfer reporting Evidence that supports internal review and assessment preparation What is and is not covered ## Know What Remediation Applies To Included Remediation activity applies to identified CUI in file systems, SharePoint, and OneDrive, moving into destinations your organization authorizes. Broader discovery coverage Discovery covers a broader set of sources than remediation does. CUI identified outside the remediation scope is still reported so your team can determine the appropriate action. Customer responsibility Teramis does not decide classification, determine which contractual requirements apply, make legal or notification determinations, or approve the final boundary. From findings to a fixed environment ## Act on What Discovery Found, and Be Able to Show It Talk with Teramis about your validated findings, your authorized destinations, and the documentation your team needs to produce. Do not submit Controlled Unclassified Information, credentials, file paths, or incident evidence through this form. [Request a Demo](https://teramis.us/request-a-demo?hsLang=en-us)[Start a CUI Discovery Assessment](https://teramis.us/cui-discovery-readiness-assessment-teramis?hsLang=en-us) ###### *Do not submit Controlled Unclassified Information, credentials, file paths, or incident evidence through this form.* [![Teramis\_logo\_horiz\_white (1)](https://teramis.us/hubfs/Teramis_logo_horiz_white%20(1).avif "Teramis_logo_horiz_white (1)")](https://teramis.us?hsLang=en-us) ###### Teramis provides precision discovery, validation, remediation, and ongoing monitoring of CUI, ITAR, and other covered defense information, so Defense Industrial Base organizations can build their CUI boundary on evidence. Remediation runs only on actions you approve, and every action is documented. - [Platform](https://teramis.us/platform?hsLang=en-us) - [How Teramis Works](https://teramis.us/company/how-teramis-works?hsLang=en-us) - [CUI Discovery](https://teramis.us/platform/cui-discovery?hsLang=en-us) - [Remediation](https://teramis.us/platform/remediation?hsLang=en-us) - [Evidence & Validation](https://teramis.us/platform/evidence-validation?hsLang=en-us) - [Ongoing Monitoring](https://teramis.us/platform/ongoing-cui-monitoring?hsLang=en-us) - [Deployment & Data Sources](https://teramis.us/platform/deployment-and-data-sources?hsLang=en-us) - [Who We Help](https://teramis.us/who-we-help?hsLang=en-us) - [Enterprise](https://teramis.us/solutions/by-organization/enterprise?hsLang=en-us) - [Government](https://teramis.us/solutions/government-agencies?hsLang=en-us) - [Compliance Advisors](https://teramis.us/solutions/by-organization/compliance-advisors?hsLang=en-us) - [Small Business](https://teramis.us/solutions/by-organization/small-business?hsLang=en-us) - [CUI Solutions](https://teramis.us/solutions?hsLang=en-us) - [Boundary Validation](https://teramis.us/solutions/cui-boundary-validation?hsLang=en-us) - [Spillage Monitoring](https://teramis.us/solutions/cui-remediation-spillage-monitoring) - [CUI Scoping](https://teramis.us/solutions/cmmc-scoping?hsLang=en-us) - [Partners](https://teramis.us/partners?hsLang=en-us) - [Partner Resources](https://teramis.us/partners/partner-resources?hsLang=en-us) - [Our Partners](https://teramis.us/partners/who-we-partner-with?hsLang=en-us) - [Become a Partner](https://teramis.us/partners/become-a-partner?hsLang=en-us) - [Resources](https://teramis.us/resources?hsLang=en-us) - [FAQ](https://teramis.us/resources/faqs?hsLang=en-us) - [Video Media](https://teramis.us/resources/videos-webinars?hsLang=en-us) - [Blog](https://teramis.us/teramis-blog?hsLang=en-us) - [Company](https://teramis.us/company?hsLang=en-us) - [About Us](https://teramis.us/company/about?hsLang=en-us) - [Careers](https://teramis.us/company/careers?hsLang=en-us) - [Contact](https://teramis.us/contact-us?hsLang=en-us) ![teramis footer image](https://teramis.us/hs-fs/hubfs/teramis%20footer%20image.png?width=800&height=320&name=teramis%20footer%20image.png "teramis footer image") Ready to find your CUI? See how Teramis helps your organization identify CUI, validate the boundary, and monitor what changes over time. [Talk to Us About CUI](https://teramis.us/talk-to-us-about-cui?hsLang=en-us) --- [Privacy Policy](https://teramis.us/privacy-policy?hsLang=en-us) · [EULA](https://teramis.us/eula?hsLang=en-us) · © 2026. All rights reserved. Cookie Settings