So, I have a staffing company essentially that is 4 people and am admin. The admin will never see CUI and we have one contract which is essentially a staffing contract where all four of us go to the prime and use their information systems. We have no reason for CUI on our PCs, but I was going to make my PC the single one that could handle it because the prime puts the flowdown contractual DFARS 7012 line in our contract as sort of a boiler plate term and does questionnaires of cmmc status, so I don’t want to be caught off guard as this is our only contract…

I just bought preveil… and that might be the route I go but honestly it’s more work than I thought to get to level 2. Is there something I am missing for such a small company like this? Would a VDI solution or MSP be more viable - it would be “if I ever needed to process/store etc CUI I have a service I can log into, but practically won’t happen” type of thing