NIST releases draft assessment publication for protecting controlled unclassified information of high value assets

The National Institute of Standards and Technology has released a draft publication designed to help organizations prepare and conduct assessments on their ability to secure controlled unclassified information for high value assets maintained in non-governmental systems.

The publication is foundational to levels four and five of the Defense Department’s Cybersecurity Maturity Model Certification program, which focuses on the protection of CUI. DOD has more stringent requirements to address advanced persistent threat actors in the upper tiers of the program.

“Draft...