Controlled Unclassified Information Overlay
Overlay Name: NIST SP 800-171, Rev 3, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
Overlay Publication Date: May 2024
Technology or System: Controlled Unclassified Information
Overlay Author: Ron Ross (NIST), Victoria Pillitteri (NIST)
Comments: Supplement to SP 800-171, Revision 3, identifying controls for protecting the confidentiality of Controlled Unclassified Information (CUI) based on SP 800-53, Revision 5, and SP 800-53B. The control overlay serves as an alternative method to capture the security requirements in SP 800-171, Revision 3, and provides a detailed analysis of the tailoring decisions at the control item (or requirement item)-level between SP 800-53 and SP 800-171. The CUI overlay (.xlsx) is provided in the Supplemental Materials section of the SP 800-171 publication details page.
The overlay is applicable to any entity or user of SP 800-171.
Overlay Point of Contact: Ron Ross, Victoria Pillitteri
Return to Control Overlay Repository Overview
Disclaimer Statement The National Institute of Standards and Technology (NIST) has established the Security Overlay Repository as a public service. Security control overlays are made available by NIST on an “AS IS” basis with NO WARRANTIES Some submitted overlays may be available for free while others may be made available for a fee. It is the responsibility of the User to comply with the Terms of Use of any given overlay. Overlay users are solely responsible for determining the appropriateness of using and distributing the security control overlays. User assumes all risks associated with their use, including but not limited to compliance with applicable laws; damage to or loss of data, programs or equipment; and the unavailability or interruption of operation. NIST MAKES NO WARRANTY OF ANY KIND, EXPRESS, IMPLIED OR STATUTORY, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT AND DATA ACCURACY
