I read the DPAS regulations and can't seem to find an answer. Is a DPAS rating on a contract (or subcontract/purchase order) considered CUI? Does a foreign national need to be restricted from seeing it?

You may start your research with DOD by reviewing https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/520048p.PDF

59 minutes ago, Neil Roberts said:

You may start your research with DOD by reviewing https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/520048p.PDF

Instead of that, which doesn't mention DPAS, start with DoDD 4400.01E, Defense Production Act Programs.

https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodd/440001p.pdf?ver=2018-11-09-111906-183

Then look at DoD 4400.1-M, Department Of Defense Priorities And Allocations Manual.

https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodm/440001m.pdf?ver=2018-12-11-110803-913

To the best of my knowledge, DPAS ratings are not controlled unclassified information. But check around.

Not saying a deep dive will answer the question but here is another possible reference to check around in.   As I understand it does provide help regarding DFARS 252.204.7102 and NIST SP 800-171......

http://dodprocurementtoolbox.com/ at the Cybersecurity tab

1 hour ago, Former_DCAA said:

I read the DPAS regulations and can't seem to find an answer. Is a DPAS rating on a contract (or subcontract/purchase order) considered CUI? Does a foreign national need to be restricted from seeing it?

Does the document that has the DPAS information have CUI markings? 

The rating is evident on solicitations.  Why would orders with the same rating be marked CUI?

23 hours ago, Former_DCAA said:

Is a DPAS rating on a contract (or subcontract/purchase order) considered CUI? Does a foreign national need to be restricted from seeing it?

No, to both questions.

Back in the day I used to work on secret and above programs. Many, many aspects of those contracts were classified. But nobody ever worried about the DPAS rating. Which is to say, it was neither classified nor was it controlled.

Short answer: I agree with Mr. Edwards' position on the matter.

The DOD CUI Registry lists the laws, regulations and government-wide policies requiring DOD safeguarding of each CUI category. See, https://www.dodcui.mil/Portals/109/Documents/CUI Registry/CUI Registry PDF 18 MAY 21.pdf?ver=oY8Aux88iwaicCIJbabl8A%3d%3d. There is a Procurement and Acquisition category. I reviewed it and did not find any inclusion of DPAS related ratings (FAR 52.211-15 , FAR 11.6, 15 CFR 700).

 

 

Thank you all. It does not appear to be CUI.