NIST plans to reduce number of tailoring parameters in foundational controlled unclassified information publication

The National Institute of Standards and Technology will reduce the number of “organizational-defined parameters” in the next draft update to its foundational guide on the handling of controlled unclassified information on nonfederal systems, in response to stakeholder feedback.

The agency released the first draft of NIST Special Publication 800-171 Rev. 3 in May and heard from a wide variety of stakeholders, including industry players and government agencies, who raised concerns over the use of ODPs.

An analysis...