Most organizations agree a key problem for the CMMC program is the Defense Department's inability to properly identify and mark CUI.