NIST CUI publication draft dives deeper into making connections across security controls

The final draft of NIST Special Publication 800-171 Rev. 3 seeks to make stronger connections among the security requirements for handling controlled unclassified information on nonfederal systems through the creation of a new category designed to address tailoring needs.

The change is partially in response to pushback from the National Institute of Standards and Technology’s decision to incorporate “organization-defined parameters” in the first draft of NIST 800-171 Rev 3. that would allow agencies to make more of their own...