Pentagon publishes guidance on using updated NIST controlled unclassified information publication for contracting officials

The Pentagon is providing instructions to contracting officials on tailoring the latest version of the National Institute of Standards and Technology’s foundational publication on controlled unclassified information, in a recent memorandum on organization-defined parameters critical to the next iteration of the Cybersecurity Maturity Model Certification program.

NIST introduced major updates to NIST Special Publication 800-171 in May 2024 with the release of revision three. Updates included introducing ODPs in some of the security requirements and adding new tailoring categories...