Covered Defense Information (CDI)

Covered Defense Information (CDI) is the term used in DFARS 252.204-7012 for the information that requires protection. CDI includes CUI that is provided to the contractor by or on behalf of DoD in connection with the contract, or collected, developed, received, transmitted, used, or stored by the contractor in support of the contract.

CDI and CUI are closely related — in practice, CDI in the defense contracting context is essentially CUI. The term CDI is specific to the DFARS clause, while CUI is the broader government-wide designation.

Why It Matters

If your contract references CDI, you're handling information that triggers CMMC requirements. Understanding what constitutes CDI in your specific contract helps you accurately scope your CUI environment and compliance obligations.