Glossary · Glossary
NIST SP 800-171
The NIST Special Publication that specifies security requirements for protecting Controlled Unclassified Information in non-federal systems, such as those of defense contractors. Compliance with its controls is a common contractual obligation. NIST SP 800-171 defines how contractors must protect Controlled Unclassified Information on their own systems; it is the technical baseline that CMMC verifies and DFARS requires.
The NIST Special Publication that specifies security requirements for protecting Controlled Unclassified Information in non-federal systems, such as those of defense contractors. Compliance with its controls is a common contractual obligation.
Why it matters
NIST SP 800-171 defines how contractors must protect Controlled Unclassified Information on their own systems; it is the technical baseline that CMMC verifies and DFARS requires.
Standards & authorities
- NIST SP 800-171 Rev. 2
- DFARS 252.204-7012
Related in glossary
Frequently asked
What is NIST SP 800-171?
The NIST Special Publication that specifies security requirements for protecting Controlled Unclassified Information in non-federal systems, such as those of defense contractors. Compliance with its controls is a common contractual obligation.
Why does NIST SP 800-171 matter for defense and counter-UAS operators?
NIST SP 800-171 defines how contractors must protect Controlled Unclassified Information on their own systems; it is the technical baseline that CMMC verifies and DFARS requires.
What standard or authority governs NIST SP 800-171?
NIST SP 800-171 is defined or governed by NIST SP 800-171 Rev. 2, DFARS 252.204-7012.