NIST Special Publication 800-171A Rev. 3 - Assessing Security Requirements for Controlled Unclassified Information
This publication provides a methodology and assessment procedures for evaluating security requirements associated with the protection of Controlled Unclassified Information (CUI). It supports compliance with NIST SP 800-171 in nonfederal systems and organizations.
NIST Special Publication 800-171A Revision 3 offers organizations a framework to assess the security requirements detailed in NIST SP 800-171. It provides flexible procedures that can accommodate both independent and government-sponsored assessments, allowing for customization based on depth and coverage needs. These assessments are crucial for safeguarding CUI, which is essential to the functioning of federal agencies. The publication aims to provide practical tools to reinforce federal contractors' compliance, particularly in the context of the Federal Acquisition Regulation (FAR) and the Federal Information Security Modernization Act (FISMA). The document also includes various families of controls, giving users clarity on standards they must meet.
