NIST released revision 3 of SP 800-171 on May 14, 2024, to modernize safeguards for controlled unclassified information in nonfederal systems. The update restructures 97 security requirements into 17 families that mirror NIST SP 800-53 Rev. 5. It introduces 88 organization-defined parameters and removes the previous nonfederal organization tailoring approach. Defense contractors and research universities must comply under federal statutes and contract clauses, though DoD Class Deviation 2024-O0013 requires continued use of revision 2 for certain DFARS clauses until further rulemaking.
Read the full story at casrai.org.
Photo: user32212 / Pixabay
