Submit your comments by July 14, 2023, for draft Special Publication (SP) 800-171 Rev. 3, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations.
Reviewers are encouraged to comment on all or parts of draft NIST SP 800-171, Rev. 3. See the publication details for a copy of the draft and instructions for submitting comments.
Significant changes to draft NIST SP 800-171, Rev. 3 include:
- Updated security requirements and families to reflect updates in NIST SP 800-53, Rev. 5 and the NIST SP 800-53B moderate control baseline
- Updated tailoring criteria
- Increased specificity for security requirements to remove ambiguity, improve the effectiveness of implementation, and clarify the scope of assessments
- Introduction of organization-defined parameters (ODP) in selected security requirements to increase flexibility and help organizations better manage risk
- A prototype CUI overlay
Comments received in response to this request will be posted on the Protecting CUI project site after the due date. Submitters’ names and affiliations (when provided) will be included, while contact information will be removed.
Please direct questions and comments to [email protected].