What is CUI and why does it change everything?

CMMC scope is driven by where CUI is stored, processed, or transmitted. If CUI location and flow cannot be clearly explained, the assessment boundary cannot be defended.