Company Controlled Information is not part of the CMMC model. The CMMC model is only focused on government-controlled information or Covered Defense Information (CDI).
Company Controlled Information is vital to the organization’s survival and should be protected to the same standard as government information. Having the same set of procedures to safeguard all controlled information reduces confusion and error.
Source: 171Comply.com
