Download Informative Reference Resource

https://www.nist.gov/document/csf-sp800-171mappingxlsx

Status:
Final

Informative Reference Version:
1.0.0

Focal Document Version:
1.1

Summary:
A mapping between Cybersecurity Framework version 1.1 Core reference elements and NIST Special Publication 800-171 revision 1 security requirements from Appendix D, leveraging the supplemental material mapping document.

Target Audience:
Federal agencies as the entity establishing and conveying the security requirements in contractual vehicles and nonfederal organizations responsible for complying with the security requirements set forth for protecting the confidentiality of CUI when the CUI is resident in a nonfederal system.

Comprehensive:
No

Comments:
NIST SP 800-171 addresses protecting the confidentiality of controlled unclassified information.

Point of Contact:
sec-cert@nist.gov

Category of Submitter:
Public Sector

Dependencies/Requirements:
Stand-alone

Citations:
NIST SP 800-53 Revision 4, ISO/IEC 27001