Protecting Controlled Unclassified Information CUI

Update Status

While the public comment period on SP 800-171 and SP 800-171A continues, the SP 800-172 update has begun. Here’s what you can expect.

• The enhanced security requirements for protecting CUI will be modified to match the structure of the requirements in SP 800-171, Revision 3.
• The enhanced security requirements will align with the structure and content of the controls and control enhancements in SP 800-53, Revision 5.
• Enhanced security requirements will be added to address new threats and vulnerabilities.
• Changes to the enhanced security requirements will support the future development of mission-specific CUI overlays.

As the modifications to the enhanced security requirements stabilizes, work will commence on the update to the assessment procedures in SP 800-172A, with the intent to publish both documents simultaneously.

This is a high priority project for NIST and we are starting work on the update now.