MITG
ENC

Regulated Enclave

For defense contractors and subcontractors handling controlled unclassified information (CUI), MITG secures a defined environment on Microsoft GCC High and supports readiness for Cybersecurity Maturity Model Certification (CMMC) assessment. Services range from monitoring and response to security engineering and day-to-day compliance program management.

Without an enclave

When CUI is spread across the organization, more systems and supporting security services may fall within assessment scope.

With ENC

CUI concentrated in a defined environment on GCC High can reduce assessment scope. Supporting systems and security services also need to be considered.

Illustrative CUI boundary; supporting assets may also be in scope

Service levels

Each level builds on the previous one, from monitoring and response through day-to-day compliance program management.

01
Monitoring and response
Monitoring and response for an enclave operated by your team or another provider.
02
Security engineering
Monitoring and response, plus MITG management of the enclave’s security configuration, hardening, and drift control.
03
Compliance program management
Monitoring, response, and security engineering, plus day-to-day management of the compliance program.

Assessment support

MITG maintains evidence for the controls it operates and supports your work with the assessor before, during, and after assessment. Your organization retains ownership of the compliance program and responsibility for certification.

Common questions

What is a CMMC enclave?
A segregated environment that holds CUI, designed to limit the systems in scope for the CMMC assessment.
Why Microsoft GCC High?
It is the Microsoft cloud environment built for US government compliance requirements, including those common in defense supply chains.
Who is this service for?
Contractors and subcontractors handling CUI under Department of Defense contracts that want to concentrate CUI in a defined environment, including companies preparing for CMMC assessment.
Does MITG certify the enclave?
MITG supports assessment readiness; it does not issue CMMC certification.
Request an introductory meeting