Glossary term
NIST SP 800-171
The security standard for protecting Controlled Unclassified Information in non-federal systems.
NIST Special Publication 800-171 defines security requirements for contractors that store, process, or transmit Controlled Unclassified Information. It underpins DFARS 252.204-7012 and the CMMC program. Compliance requires a System Security Plan and a Plan of Action and Milestones, and self-assessment scores are reported in the Supplier Performance Risk System (SPRS).
Categories
- compliance
- cybersecurity
Related terms
- CMMCCybersecurity Maturity Model Certification — DoD's tiered cybersecurity verification program for the defense industrial base.
- Controlled Unclassified Information (CUI)Government information that requires safeguarding but is not classified.
- DFARSDefense Federal Acquisition Regulation Supplement — DoD-specific additions to the FAR.