FCI Scoping & Boundary Workbook

This product is an independent, self-guided readiness, scoping, documentation, and management tool developed by ThriveBridge Strategies LLC. It is not an official CMMC assessment, certification, Government determination, legal opinion, or guarantee of compliance, certification, assessment results, or contractual acceptance.

Use of this product does not establish that an organization satisfies CMMC, FAR, DFARS, NIST, Department of Defense, or other contractual or regulatory requirements.

Customers remain responsible for determining the requirements applicable to their contracts and operations; correctly identifying and classifying information; establishing and validating system and assessment boundaries; implementing applicable security requirements; maintaining adequate supporting evidence; and ensuring the accuracy and completeness of information used for assessments, affirmations, representations, or Government submissions.

If Controlled Unclassified Information (CUI) is identified or reasonably suspected, CMMC Level 1-only scoping may not be appropriate and additional contractual, cybersecurity, and CMMC requirements may apply.

Requirements and Government guidance may change. Customers should verify current contractual requirements and authoritative Government guidance before relying on this product for a specific engagement or compliance decision.

ThriveBridge Strategies LLC is an independent company and is not affiliated with, endorsed by, sponsored by, or acting on behalf of the U.S. Department of Defense, Cyber AB, or any other Government agency or accreditation body.