https://cmmcinfo.org/cmmc-faq/cui-and-fci/if-information-isnt-marked-does-that-mean-it-isnt-cui/