On November 9, 2023, the National Institute of Standards and Technology (“NIST”) released the Final Public Draft (“FPD”) of Special Publication (“SP”) 800-171 Revision (“Rev.”) 3, “Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations” and the Initial Public Draft of NIST SP 800-171A Rev 3, “Assessing Security Requirements for Controlled Unclassified Information.” The FPD of SP 800-171 Rev. 3 condenses several control requirements from the initial public draft while adding new requirements under existing controls. The initial draft of SP 800-171A now aligns with SP 800-171 Rev. 3 and includes more detailed assessment procedures than its predecessor. Changes in both documents forecast the evolving compliance requirements for organizations required to safeguard Controlled Unclassified Information (“CUI”).
More Posts
Biden’s Executive Order on Artificial Intelligence
FAR Council’s Cyber Harvest: New Incident Reporting and Federal Information System Requirements Await Government Contractors
Homeland Cybersecurity: DHS Overhauls Its CUI Program, Releases New Contract Clauses
Softening the Blow: OMB Extends Software Supply Chain Security Deadline and Clarifies Scope
DoD Digs In Its Cyber “SPRS”: New Solicitation Provision Requires Contracting Officers to Consider SPRS Risk Assessments
Biden Administration Releases Comprehensive National Cybersecurity Strategy
Illinois High Court Rules Every Collection or Disclosure is a Separate BIPA Violation
BIPA Claims Uniformly Have a 5-Year Statute of Limitations
FY 2023 National Defense Authorization Act: Key Provisions Government Contractors Should Know
Subscribe: Subscribe via RSS