Enclave

An enclave is a defined portion of your network that is isolated and protected at a specific security level. In CMMC terms, many companies create a CUI enclave — a segregated network segment where all Controlled Unclassified Information is processed and stored, surrounded by additional security controls.

Creating an enclave allows you to limit the scope of your CMMC assessment. Instead of bringing your entire enterprise network up to CMMC Level 2 standards, you can isolate CUI handling into a smaller, more controlled environment and focus your security investment there.

Why It Matters

Properly scoping an enclave can dramatically reduce the cost and complexity of CMMC compliance. However, the enclave must be genuinely isolated — if CUI leaks into your broader network, your entire enterprise may be in scope.