CUI Checklist: Do You Handle CUI?

8 things to check in your contracts and files, to work out whether your business handles Controlled Unclassified Information and what to ask if you can’t tell. Your answers stay in your browser.

1 of 8Does any of your DoD contracts or subcontracts include DFARS clause 252.204-7012?

Look in the clauses section, or in the clauses your prime flows down to you.

2 of 8Does a contract, statement of work or flow-down say you will receive or create CUI?
3 of 8Have you received documents or files with a “CUI” or “CONTROLLED” banner marking?
4 of 8Have you received material with older markings such as “FOUO” (For Official Use Only)?
5 of 8Do you have drawings or specifications for a military program that carry distribution statement B, C, D, E or F?

The statement is usually in the title block or on the cover sheet.

6 of 8Do you handle export-controlled technical data (ITAR or EAR)?
7 of 8Do you create drawings, reports or data for the contract that are based on information that is CUI?
8 of 8Have you received technical information from the government or a prime that is unmarked or inconsistently marked?

This is common, and it’s a reason to ask rather than a sign either way.

0 of 8 answered