NIST SP 800-171

What is NIST SP 800-171?

NIST Special Publication 800-171 (SP 800-171) provides recommended requirements for protecting the confidentiality of Controlled Unclassified Information (CUI) when the information is resident in nonfederal systems and organizations; or when the nonfederal organization is processing, storing, or transmitting such information on behalf of a federal agency. It is commonly used as a baseline security standard for contractors and subcontractors who handle CUI for the U.S. government, particularly within the Department of Defense supply chain. Organizations implement the security requirements outlined in NIST SP 800-171 to safeguard CUI from unauthorized access and disclosure.