I've read a few threads about similar questions that got heated so maybe it's really just a grey area but where is the line in a contract between FCI and CUI besides that the government marked it as CUI? If I'm a recruitment agency and try to place someone at a defense contractor would my agency need Level 1 or Level 2?

ETA: I found this in the CUI registry - "Material and information relating to, or associated with, the acquisition and procurement of goods and services, including but not limited to, cost or pricing data, contract information, indirect costs and direct labor rates." Does that mean we need Level 2? I doubt any agency outside of the big ones have the ability to implement all of the Level 2 controls