NIST Issues Updated Security Requirements for Protecting CUI | CSRC NIST has published the final versions of Special Publication (SP) 800-171r3 (Revision 3), Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations, and SP 800-171Ar3, Assessing Security Requirements for Controlled Unclassified Information
Controlled Unclassified Information (CUI) Program Why is the CUI Program necessary? Executive departments and agencies apply their own ad-hoc policies and markings to unclassified information that requires safeguarding or dissemination controls, resulting in:
Small Business Primer for Protecting CUI | CSRC NIST has released a small business primer to supplement SP 800-171 revision 3, to help smaller, under-resourced organizations better protect Controlled Unclassified Information (CUI)
controlled unclassified information (CUI) - Glossary | CSRC However, CUI does not include classified information or information a non-executive branch entity possesses and maintains in its own systems that did not come from, or was not created or possessed by or for, an executive branch agency or an entity acting for an agency
Glossary | CSRC Glossary terms and definitions last updated: May 29, 2026 This Glossary is an aggregation of terms and definitions specified in NIST's cybersecurity and privacy standards, guidelines, and other technical publications, and in CNSSI 4009 These should not be viewed as "official" or "preferred" definitions for a particular subject area, sector, or industry, with the exception that some
Protecting Controlled Unclassified Information | CSRC SP 800-171 Security Requirements for Protecting CUI Purpose Recommended security requirements for protecting the confidentiality of CUI: (1) when the CUI is resident in a nonfederal system and organization; (2) when the nonfederal organization is not collecting or maintaining information on behalf of a federal agency or using or operating a system on behalf of an agency; and (3) where there
SP 1318, Protecting Controlled Unclassified Information (CUI): NIST . . . This introductory guide provides small businesses with a high level overview of NIST Special Publication (SP) 800-171 Revision 3, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations The document is broken up into two separate sections The first few pages provide a general overview tailored to business leaders or those new to SP 800-171 R3 The second section