NIST publishes draft update to advanced persistent threats publication building on CUI guidance

The National Institute of Standards and Technology has opened a public comment period on draft enhanced security requirements addressing the protection of controlled unclassified information against advanced persistent threats.

“SP 800-172r3 provides recommended security requirements to protect the confidentiality, integrity, and availability of CUI when it is resident in a nonfederal system and organization and is associated with a high value asset or critical program,” NIST said in a Wednesday announcement. The comment period closes Jan. 10.

NIST said, “The...