Free worksheet

CUI / in-scope system map

Optimistic SPRS scores usually start with a fuzzy boundary. Use this map to name the enclave, the path types, who can touch it, and which services you share — then score 800-171 against that picture.

Data practice: answers stay in this browser. Export is a CSV you download. Do not paste CUI, drawings, customer files, or credentials. See Privacy.

Not a C3PAO. Scope worksheet only. Use labels and counts — never paste CUI, drawings, or customer documents.

Free worksheet · no CUI · browser only

CUI / in-scope system map

Freeze the enclave before you paint controls green. This form records where work happens, not the CUI itself. Export the CSV into your protected environment.

CUI path types
Who can touch in-scope systems
Shared services (you vs them)
Asset classes in the enclave

Before you treat scope as frozen

  • Name the assessment boundary.
  • Mark at least one CUI path type (labels only).
  • Mark who can touch in-scope systems.
  • Mark asset classes in the enclave.
  • List shared services — empty usually means you have not looked.
Shared-responsibility matrix

Blank starter

Prefer a spreadsheet? Download the CUI scope map template (CSV).

Next