Hello Guys, I have a doubt about SPRS scoring in relation to controls that explicitly mention CUI. Can we evaluate a company that is using FCI against NIST 800-171 Rev. 2 and score the controls even if we are only using FCI where CUI controls are mentioned?