Teramis blog

CMMC Phase II Is Suspended. Your CUI Obligations Are Not.

info@teramis.us (Teramis) — Wed, 30 Sep 2026 17:37:15 GMT

What the CMMC Phase 2 suspension changed, and what it didn't.

On July 13, 2026, the Department of War paused the third-party audit portion of CMMC. On September 3, it made that pause binding on every contracting officer. Neither action touched the rules that require you to protect CUI, score yourself honestly in SPRS, and have a senior official affirm that score every year.

CMMC in 2026: What Defense Contractors Need to Know

info@teramis.us (Teramis) — Thu, 17 Sep 2026 10:04:47 GMT

For most of its existence, the Cybersecurity Maturity Model Certification (CMMC) program lived in the future tense: something defense contractors would eventually need to address. That changed on November 10, 2025, when the Department of Defense began including CMMC requirements in contracts.

Closing the Gaps: Accurate CUI Identification and Continuous Monitoring

info@teramis.us (Teramis) — Wed, 09 Sep 2026 14:00:00 GMT

Closing the Gaps: Why Accurate CUI Identification and Continuous Monitoring Are Essential for CMMC Compliance

The House Armed Services Committee’s recent push to amend H.R. 3838 sends a strong message to the Defense Industrial Base (DIB): protecting Controlled Unclassified Information (CUI) isn’t just about checking compliance boxes—it’s a critical piece of national security.

Is ITAR Data Covered Defense Information?

info@teramis.us (Teramis) — Tue, 08 Sep 2026 15:39:08 GMT

How the rules stack and when export-controlled technical data becomes Covered Defense Information

Defense contractors often treat Controlled Unclassified Information (CUI), DFARS cybersecurity clauses, CMMC, and ITAR as interchangeable labels for “sensitive defense data.” They are not. They answer different questions, they are enforced by different agencies, and they only overlap when a specific legal test is met.

FutureFeed Announces Partnership with Teramis

info@teramis.us (Teramis) — Tue, 25 Aug 2026 15:01:08 GMT

FutureFeed Announces Partnership with Teramis to Bring Fully Automated CUI Discovery to the CMMC Ecosystem

Defense contractors and FutureFeed partners can now identify and validate their CUI boundary automatically, eliminating scoping guesswork.

Why Manual CUI Discovery Fails at Enterprise Scale

info@teramis.us (Teramis) — Tue, 04 Aug 2026 23:06:44 GMT

Why Accurate CUI Discovery Matters for Secure Enclaves

Defense contractors may have Controlled Unclassified Information distributed across millions of files, multiple repositories, legacy systems, employee devices, email environments, engineering platforms, and cloud services.

The challenge is not limited to protecting CUI the organization already knows about. Organizations must also determine where CUI actually exists, whether it is inside the documented security boundary, and whether new copies have appeared in unauthorized locations.

At enterprise scale, manual review cannot provide that visibility efficiently or consistently.

Teramis Delivers Precise CUI Discovery to Strengthen Cape Endeavors’ Managed Secure Enclave Solutions

info@teramis.us (Teramis) — Mon, 13 Jul 2026 13:00:00 GMT

Why Accurate CUI Discovery Matters for Secure Enclaves

At Teramis, our mission centers on solving one of the most persistent obstacles in CMMC compliance: the inability of organizations to accurately locate, validate, and continuously monitor Controlled Unclassified Information (CUI) across their environments. Through our strategic partnership with Cape Endeavors, a leading provider of managed CMMC secure enclaves, we are helping transform how defense contractors prepare for and maintain compliance with NIST SP 800-171 and CMMC Level 2 requirements.

CUI Discovery Before CMMC: The Key to Reducing Cost and Scope

info@teramis.us (Teramis) — Sat, 11 Jul 2026 16:00:00 GMT

CUI Discovery Before CMMC: The Key to Reducing Cost and Scope

From Millions of False Positives to 99%+ Accuracy: How Johnson Controls Solved Its CUI Discovery Challenge

info@teramis.us (Teramis) — Wed, 08 Jul 2026 12:45:00 GMT

One of the biggest misconceptions surrounding CMMC compliance is that identifying Controlled Unclassified Information (CUI) is simply a matter of running a scan. For organizations with years of engineering data, contracts, email, SharePoint sites, network file shares, and cloud repositories, the challenge isn't finding information, it's accurately identifying which information is actually CUI.

Teramis Partners with InDirectIT to Strengthen CMMC Compliance with Automated CUI Discovery

info@teramis.us (Teramis) — Wed, 01 Jul 2026 14:00:00 GMT

Organizations pursuing CMMC Level 2 compliance face a common challenge before they can implement security controls or prepare for an assessment: identifying where Controlled Unclassified Information (CUI) actually exists.