In November, NIST released a draft version of NIST Special Publication 800-171,
"Protecting Controlled Unclassified Information
("CUI") in Nonfederal Information Systems and
Organizations." The guidance addresses information technology
infrastructure and associated security policies and practices by
contractors serving the federal government. The requirements apply
to: (i) nonfederal information systems that are beyond the scope of
the systems covered by the Federal Information Security Management
Act; and (ii) all components of nonfederal systems that process,
store, or transmit CUI.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.
