NIST SP 800-172

Also known as: SP 800-172, NIST 800-172, 800-172

NIST SP 800-172 Enhanced Security Requirements for CUI — NIST (National Institute of Standards and Technology)

Official site Official change log

Enhanced requirements for controlled unclassified information, applied on top of SP 800-171 where the threat is an advanced persistent adversary. The basis of CMMC Level 3, so it decides what the highest tier of defence contractors must implement.

Subscribe to NIST SP 800-172 (RSS)

Timeline

No changes recorded yet — we are watching, and nothing has been published.

Monitoring

Watched by 1 official source. Watching since 19 September 2026.