Protecting Controlled Unclassified Information CUI

NIST SP 800-171 Update Status

On July 19, 2022, NIST announced its intention to update the series of special publications dedicated to the Protection of Controlled Unclassified Information (CUI). Many changes are actively under consideration reflecting the current thinking of NIST after extensive review and analyses of the public comments. Based on the feedback received, inputs from workshops and conferences, and discussions with federal agencies, the changes under consideration include:

• Streamlining the Introduction and Fundamentals sections of the document
• Withdrawing requirements that are either outdated, no longer relevant, or redundant with other requirements
• Reassigning some of the NFO controls to the CUI, NCO, or FED tailoring categories
• Adding new requirements based on changes to the NIST moderate control baseline in SP 800-53B and the reassignment of selected NFO controls
• Changing the wording of selected requirements to achieve greater clarity and consistency with the controls in SP 800-53
• Combining requirements where appropriate for greater efficiency
• Adding organizationally-defined parameters to selected requirements to achieve greater specificity of control requirements
• Updating the discussion sections for individual requirements
• Updating the supplemental information for individual requirements with additional technical references and mappings to SP 800-53, Revision 5 controls
• Revising the structure of the References, Glossary, and Acronyms sections for greater clarity and ease of use.
• Revising the tailoring and mapping tables in Appendix C and Appendix D, respectively, for consistency with the changes in the Requirements section
• Adding a CUI Overlay appendix using the controls from SP 800-53, Revision 5 and the tailored moderate baseline from SP 800-53B