Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Protecting Controlled Unclassified Information CUI

Public Comments Received Draft SP 800-172 R3

 

Below are comments received on the final public draft of SP 800-172r3, Enhanced Security Requirements for Protecting Controlled Unclassified Informa tion  

The public comment period closed on January 16, 2026.

All comments submitted during the public comment period for Draft NIST SP 800-172r3 will be posted below without change or redaction, so commenters should not include information they do not wish to be posted (e.g., personal or business information). 

 
Date Received From
29 September 2025 Aboubacar Camara
7 November 2025 Greg Smith
12 November 2025

Gary Guissanie

13 November 2025 WIZ
14 November 2025 DOE
19 November 2025 U.S. Navy
25 November 2025 Google
4 January 2026 Netarx LLC
6 January 2026 ISSA Special Interest Group on Cyber Resilience
15 January 2026 ESI / Carnegie Mellon University
16 January 2026 OpenPolicy
16 January 2026 NDIA
16 January 2026 AIA Aerospace
16 January 2026 Infoblox
16 January 2026 MSP / Aethon Security
   

Below are comments received on the initial public draft (ipd) of Special Publication 800-172 Revision 3Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations – Enhanced Security Requirements for Critical Programs and High Value Assets.  

The public comment period closed on January 17, 2025.

All comments submitted during the public comment period for Draft NIST SP 800-172r3 will be posted below without change or redaction, so commenters should not include information they do not wish to be posted (e.g., personal or business information). 

Date Received From
17 October 2024 SEI and JHUAPL
18 November 2024 E&M Technologies
10 December 2024 RGB Professional Services
18 December 2024 The Aerospace Corporation
5 January 2025 Ryan Wagner
9 January 2025 USAF CROWS
10 January 2025 Govindaraj Palanisamy
10 January 2025 GSA
12 January 2025 Mitchell Berger
16 January 2025 Hewlett Packard Enterprise
16 January 2025 Aerospace Industries Association (AIA)
17 January 2025 CNLabs Test Services
17 January 2025 RTX
17 January 2025 SEI and JHUAPL
17 January 2025 Gary Guissanie
17 January 2025 MauricioTavares
Comments Received on Draft SP 800-171B

Below are comments received on Draft Special Publication 800-171B, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations – Enhanced Security Requirements for Critical Programs and High Value Assets.  The public comment period closed on August 2, 2019.

Please note that comments on the Public Cost Analysis are submitted and posted to www.regulations.gov/docket?D=DOD-2019-OS-0072 (Regulations.gov docket no. DOD-2019-OS-0072). 

All comments submitted during the public comment period for Draft NIST SP 800-171B will be posted below and to https://www.regulations.gov/docket?D=NIST-2019-0002 (Regulations.gov docket no. NIST-2019-0002)  without change or redaction, so commenters should not include information they do not wish to be posted (e.g., personal or business information).  

Date  Received From
26 June 2019 Compliance Forge
26 June 2019 Nevaridge Technologies
28 June 2019 Michael Pyne
10 July 2019 SphereCom Enterprises Inc.
10 July 2019 Stronghold Cyber Security 
10 July 2019 Johnson Controls
16 July 2019 Teledyne Technologies Inc.
16 July 2019 FireEye
19 July 2019 JHU APL
25 July 2019 DARPA
25 July 2019 The Pennsylvania State University
26 July 2019 Boeing
28 July 2019 Hattie Feldman
30 July 2019 Bryan Parno
31 July 2019 MDA
1 August 2019 HDR
1 August 2019 Leidos
1 August 2019  Iowa State University
1 August 2019 Beryllium
2 August 2019 Raytheon
2 August 2019 FFRDC InfoSec Collaborative
2 August 2019 New Mexico State University
2 August 2019 CTIA
2 August 2019 University of California Los Angeles
2 August 2019 Boston University
2 August 2019 Michigan Technical University
2 August 2019 Carnegie Mellon University
2 August 2019

Council on Governmental Relations / EDUCAUSE / Association of American Universities / Association of Public and Land-grant Universities / American Council on Education

2 August 2019 Duke University
2 August 2019 FireEye 
2 August 2019  National Defense Information Security and Analysis Center
2 August 2019  MITRE
2 August 2019  Aerospace Corporation 
2 August 2019  General Atomics
2 August 2019  Integrated Security Solutions
2 August 2019 University of Southern California
2 August 2019  University of Nevada Las Vegas
2 August 2019 SAIC
2 August 2019  Aerospace Industries Association
2 August 2019 University of Southern Mississippi
2 August 2019 Portland State University
2 August 2019 CNA
2 August 2019 NDIA
5 August 2019 Indiana University
6 August 2019 The Emery Group

Created June 13, 2019, Updated February 09, 2026