Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Protecting Controlled Unclassified Information CUI

Update Status

While the public comment period on SP 800-171 and SP 800-171A continues, the SP 800-172 update has begun. Here’s what you can expect.

  • The enhanced security requirements for protecting CUI will be modified to match the structure of the requirements in SP 800-171, Revision 3.
  • The enhanced security requirements will align with the structure and content of the controls and control enhancements in SP 800-53, Revision 5.
  • Enhanced security requirements will be added to address new threats and vulnerabilities.
  • Changes to the enhanced security requirements will support the future development of mission-specific CUI overlays.

As the modifications to the enhanced security requirements stabilizes, work will commence on the update to the assessment procedures in SP 800-172A, with the intent to publish both documents simultaneously.

This is a high priority project for NIST and we are starting work on the update now.

Created June 13, 2019, Updated May 14, 2024