Ross, R.
, Pillitteri, V.
and Dempsey, K.
(2022),
Assessing Enhanced Security Requirements for Controlled Unclassified Information, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.800-172A, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=934399
(Accessed December 3, 2024)
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Assessing Enhanced Security Requirements for Controlled Unclassified Information
Published
Author(s)
, ,
Abstract
The protection of Controlled Unclassified Information (CUI) in nonfederal systems and organizations is important to federal agencies and can directly impact the ability of the Federal Government to successfully carry out its assigned missions and business operations. This publication provides federal agencies and nonfederal organizations with assessment procedures that can be used to carry out assessments of the requirements in NIST Special Publication 800-172, Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171. The assessment procedures are flexible and can be tailored to the needs of organizations and assessors. Assessments can be conducted as 1) self-assessments; 2) independent, third-party assessments; or 3) government-sponsored assessments. The assessments can be conducted with varying degrees of rigor based on customer-defined depth and coverage attributes. The findings and evidence produced during the assessments can be used to facilitate risk-based decisions by organizations related to the CUI enhanced security requirements.Citation
Special Publication (NIST SP) - 800-172A
Report Number
800-172A
NIST Pub Series
Pub Type
NIST Pubs
Download Paper
Keywords
assessment, assessment method, assessment object, assessment procedure, assurance, enhanced security requirement, Controlled Unclassified Information, coverage, CUI Registry, depth, Executive Order 13556, FISMA, NIST Special Publication 800-53, NIST Special Publication 800-53A, nonfederal organization, nonfederal system, security assessment, security control.
Citation
Issues
If you have any questions about this publication or are having problems accessing it, please contact reflib@nist.gov.
Created March 15, 2022, Updated November 29, 2022