NIST SP 800-171

NIST Special Publication 800-171 Protecting Controlled Unclassified Information · NIST (National Institute of Standards and Technology) · Official site

Security requirements for protecting Controlled Unclassified Information (CUI) in non-federal systems and organizations, effectively mandatory for US DoD contractors. Rev 3 (May 2024) is the current NIST version; DoD still mandates Rev 2 for CMMC.

Timeline

NIST publishes Special Publication 800-171A Revision 3 with small business assessment guidance New version global

NIST has published Revision 3 of Special Publication 800-171A, which provides guidance for assessing security requirements for Controlled Unclassified Information (CUI) and includes a dedicated small…

Source 2026-09-17 Action required

Monitoring

Watched by 5 official sources. Watching since 7 September 2026. Last checked 13 minutes ago.