Protecting Controlled Unclassified Information (CUI) CUI

SP 800-172

Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171

Purpose

Enhanced security requirements to help protect the confidentiality, integrity, and availability of Controlled Unclassified Information (CUI) associated with critical programs or high value assets from the advanced persistent threat (APT).

Scope

The enhanced security requirements in NIST SP 800-172 are supplemental and do not impact the basic and derived security requirements contained in NIST SP 800-171, nor the scope of the implementation of the NIST SP 800-171 security requirements. The federal entity identifies the applicable enhanced security requirements; not all the enhanced security requirements apply to each system. 

Download the SP 800-172 Enhanced Security Requirements in different formats:

• Excel
• CSV

Other Resources

• Public comments Received on Draft SP 800-171B