Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

SP 800-171 Rev. 1

Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations

Date Published: December 2016 (updated 02/20/2018)

Withdrawn: June 07, 2018

Superseded By: SP 800-171 Rev. 1 (December 2016 (updated 06/07/2018))
Supersedes: SP 800-171 Rev. 1 (December 2016 (Updated 11/28/2017))


Ron Ross (NIST), Kelley Dempsey (NIST), Patrick Viscuso (NARA), Mark Riddle (NARA), Gary Guissanie (IDA)



derived security requirement; Executive Order 13556; FIPS Publication 199; FIPS Publication 200; FISMA; NIST Special Publication 800-53; nonfederal systems; security assessment; security control; security requirement; contractor systems; CUI Registry; Controlled Unclassified Information
Control Families

Access Control; Audit and Accountability; Awareness and Training; Configuration Management; Identification and Authentication; Maintenance; Media Protection; Personnel Security; Physical and Environmental Protection; System and Communications Protection; System and Information Integrity;