Glossary · N
NIST SP 800-171
NIST Special Publication 800-171 specifies the security requirements for protecting Controlled Unclassified Information in non-federal systems and organizations.
Extended definition
In more detail.
Revision 2 lists 110 requirements across 14 families, from access control and awareness to system and information integrity, and is the revision CMMC Level 2 assesses. Revision 3, published in 2024, reorganized and consolidated the requirements. Contractors document their implementation in a System Security Plan, track gaps in a plan of action, and score themselves for the Supplier Performance Risk System; assessors then test the evidence.
In our work
Where it appears.
By David Selakovic · Published 2026-10-16 · Revised 2026-10-16 · Reviewed every 180 days