The scenario
An illustrative machine shop receives purchase orders and technical drawings from a defense prime. The owner assumes its small workforce means Level 1 will be sufficient. The starting question is what information the shop handles and what the subcontract requires, rather than how many people it employs.
The discussion
If the relevant work involves only FCI and the procurement calls for Level 1, that pathway may fit. If the shop receives CUI, the analysis changes. Drawings should be reviewed against markings, contract instructions, and authorized clarification. Avoid guessing that every drawing is CUI or that an unmarked drawing is always unrestricted.
Questions for the team
What does the flowdown require? Which systems receive the drawings? Can files reach personal email, shop-floor equipment, or a cloud backup? Who can clarify the information category? Record the answers, then compare the applicable level and scope with the environment you actually operate.