Companies doing business with the Department of Defense are required to protect government information. The Defense Federal Acquisition Regulation Supplement (DFARS) clauses apply to prime and subcontractors and describe expectations for the handling of Controlled Unclassified Information (CUI) in non-federal