How to Spot a Client in the DoD Industrial Base That Handles CUI

This guidance for MSPs/MSSPs explains how to determine whether a client is a defense contractor subject to DFARS/CMMC/NIST 800-171 requirements by using public sources (USASpending, company websites, accreditation directories) and targeted questions (FAR/DFARS clauses, DoD-distribution documents, PIEE access). It outlines indicators like ITAR registration, AS9100/Nadcap certifications, and contract vehicles, recommends investigative questions to confirm CUI handling, and highlights that Huntress provides controls and documentation covering many CMMC Level 2 requirements.