GOVAGED reposted this
Status Update: NIST SP 800-172, Revision 1 Enhanced Security Requirements for Protecting Controlled Unclassified Information While the public comment period on SP 800-171 and SP 800-171A continues, the update to SP 800-172 is forging ahead. Here’s what you can expect. - The enhanced security requirements for protecting CUI will be modified to match the structure of the requirements in SP 800-171, Revision 3. - The enhanced security requirements will align with the structure and content of the controls and control enhancements in SP 800-53, Revision 5. - A significant number of enhanced security requirements will be added to address threats to CUI associated with high value assets and critical programs and potential vulnerabilities in nonfederal systems that process, store, or transmit such information. - Changes to the enhanced security requirements will support the future development of mission-specific CUI overlays, an overarching, long-term objective of the CUI update project. As proposed modifications to the enhanced security requirements stabilize, work will commence on the update to the assessment procedures in SP 800-172A, with the intent to publish both documents simultaneously. This is a high priority project for NIST and therefore, we are starting to work on the update to SP 800-172 in parallel with the other CUI publications. Ongoing project updates will appear regularly on the CUI Project web page. https://lnkd.in/de8yRpVz Finally, SP 800-172 builds on the foundation established by the security requirements in SP 800-171. We are approaching the halfway point in the public comment period for that publication. Please send us your comments as soon as possible so we can make any final course corrections. And, as always, thanks for all the work you do to keep our Nation safe. #ProtectCUI #NIST800172 #CMMC #HighValueAssets #CriticalPrograms #DIB #SystemResilience #NIST800171