My company has the need for 1 person to receive CUI. This person won’t need to send the CUI to anyone else. Can we just buy a laptop with M365 G5, G3, Defender for O365 PI Microsoft licensing and then get purchase preveil to recieve CUI? I know we still need some physical security measures but does a laptop set up this way satisfy CMMC Level 2 requirements as far as receiving CUI goes?