Pentagon issues ‘class deviation’ to address anticipated May update for NIST CUI publication

SAN FRANCISCO. The Defense Department will continue to direct contractors to follow requirements in the current version of NIST Special Publication 800-171 under a “class deviation,” amid the anticipated release this month of an update to the foundational controlled unclassified information publication.

The class deviation was put out on May 2 to “alleviate some of the stresses” of NIST updating 800-171, according to Stacy Bostjanick, chief of defense industrial base cybersecurity at the Office of the DoD Chief Information Officer....