# Open-CMMC v2.0 Extends CUI Protection to OT Systems

The Open-CMMC v2.0 release introduces an open-source, Apache-2.0 licensed solution designed to securely extend Controlled Unclassified Information (CUI) workflows from traditional IT environments to Operational Technology (OT) systems via SMB shares. This addresses a critical challenge faced by Defense Industrial Base (DIB) contractors, where many OT devices such as CNC machines, scanners, and printers only support SMB file sharing and lack native security controls for CUI handling. By enabling controlled, logged, and compliant file transfers without requiring complex Windows Server or Active Directory infrastructures, this solution offers a cost-effective and practical alternative for managing CUI in shop-floor environments with limited security capabilities.

- **Why this matters:** Procurement professionals and contractors in the DIB should evaluate Open-CMMC v2.0 as a compliant tool to meet CMMC 2.0 requirements for protecting CUI across IT and OT boundaries.
- This solution reduces the operational complexity and cost associated with deploying traditional Windows Server file servers and Active Directory environments for OT CUI workflows.
- Organizations managing sensitive defense-related data on OT systems can leverage this tool to enhance cybersecurity posture while maintaining operational continuity.
- Vendors providing cybersecurity and infrastructure solutions should consider integrating or supporting Open-CMMC v2.0 to address emerging OT security needs within defense contracting environments.

**Jurisdictions:** federal
**Industries:** Defense & Military, Information Technology
**Topics:** Cybersecurity, Cloud Services
**Published:** September 21, 2026

### Government Entities
- Defense Industrial Base (DIB)
- Office of the Secretary of Defense (OSC)

### Vendors
- Blumira (SIEM provider)
- Proxmox (Hypervisor provider)

### Key Quotes
> Getting CUI from IT to OT systems is still a hard problem for most DIB shops. Most shop-floor OT (CNC, quality stations, printers) only reads SMB shares and has no secure way to control CUI flows.
> — Original poster

> I just engineered a few months ago an on-premise enclave only because the OSC needed a file server/SMB shares to store CUI CAD. Of course with a Windows Server file server, led down the rabbit hole of on premise AD VMs, an Entra ID sync VM, etc. I wish I knew of this then as this might be a better alternative.
> — Community commenter

### Sources
- [Open-CMMC v2.0: extending protection of CUI workflow to OT systems over SMB (CNC, scanner, printers, etc)](https://www.reddit.com/r/CMMC/comments/1wlyjvv/opencmmc_v20_extending_protection_of_cui_workflow) - reddit-cmmc