NIST releases final publication detailing assessment process for protecting high value assets

The National Institute of Standards and Technology has issued the final version of its assessment procedures guidance to help organizations protect high value assets that hold sensitive federal data.

The guidance focuses on controlled unclassified information and is important to level three of the Pentagon’s Cybersecurity Maturity Model Certification program. The guidance says, “The assessment procedures are flexible and can be tailored to the needs of organizations and assessors.”

“The protection of Controlled Unclassified Information (CUI) in nonfederal systems and...