📈 See what Australia's security and GRC leaders are prioritising for 2026 
MarketplaceCybersecurityNIST SP 800-171A Rev. 3
CybersecurityGuideline

NIST SP 800-171A Rev. 3

NIST Special Publication 800-171A Rev. 3 - Assessing Security Requirements for Controlled Unclassified Information

This publication provides a methodology and assessment procedures for evaluating security requirements associated with the protection of Controlled Unclassified Information (CUI). It supports compliance with NIST SP 800-171 in nonfederal systems and organizations.

Book your strategy callView source ↗

Overview

NIST Special Publication 800-171A Revision 3 offers organizations a framework to assess the security requirements detailed in NIST SP 800-171. It provides flexible procedures that can accommodate both independent and government-sponsored assessments, allowing for customization based on depth and coverage needs. These assessments are crucial for safeguarding CUI, which is essential to the functioning of federal agencies. The publication aims to provide practical tools to reinforce federal contractors' compliance, particularly in the context of the Federal Acquisition Regulation (FAR) and the Federal Information Security Modernization Act (FISMA). The document also includes various families of controls, giving users clarity on standards they must meet.

Related in Cybersecurity

CybersecurityStandard

Cert NZ Top 10 Critical Controls — Cert New Zealand Top Ten Critical Controls

The CERT NZ Top Ten Critical Controls is a cybersecurity framework that outlines ten essential security controls organizations can implement to reduce cyber risk, improve resilience, and protect systems, data, and services from common cyber attacks.

National Cyber Security Centre (NCSC) • New Zealand • v2021

View details
CybersecurityStandard

Spain ENS — Spain - National Security Framework

The National Security Framework (ENS) is Spain's national cybersecurity framework that defines security principles and controls for public sector organizations and their suppliers to protect information systems and ensure the confidentiality, integrity, availability, authenticity, and traceability of digital services.

Government of Spain • Spain • v5 May 2022

View details
CybersecurityLaw

BDSG — Germany Federal Data Protection Act

The Federal Data Protection Act (BDSG) is Germany's national data protection law that complements the GDPR by establishing rules for personal data processing, privacy protection, regulatory oversight, and compliance obligations for public and private sector organizations.

v23 June 2021

View details
CybersecurityStandard

PPG 511 — Prudential Practice Guide 511 - Remuneration

Prudential Practice Guide (PPG) 511 - Remuneration is APRA guidance that helps regulated institutions design and manage remuneration arrangements that support prudent risk management, strong governance, and sustainable organisational performance.

Australian Prudential Regulation Authority (APRA) • Australia • v30 November 2009

View details

Ready to manage these frameworks?

6clicks maps regulations to controls, evidence and risks — automatically.

Book your strategy call