Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

SP 800-171 Rev. 1

Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations

Date Published: December 2016

Supersedes: SP 800-171 (01/21/2016)

Author(s)

Ron Ross (NIST), Patrick Viscuso (NARA), Gary Guissanie (IDA), Kelley Dempsey (NIST), Mark Riddle (NARA)

Abstract

Keywords

Contractor Information Systems; Controlled Unclassified Information; CUI Registry; Executive Order 13556; FIPS Publication 199; FIPS Publication 200; FISMA; NIST Special Publication 800-53; Nonfederal Information Systems; Security Control; Security Requirement; Derived Security Requirement; Security Assessment
Control Families

Access Control; Audit and Accountability; Awareness and Training; Configuration Management; Identification and Authentication; Maintenance; Media Protection; Personnel Security; Physical and Environmental Protection; System and Communications Protection; System and Information Integrity;