The final draft of NIST SP 800-171 revision 3 and the initial draft of SP 800-171A are out. There are simultaneously more and fewer requirements. ODPs have gone away, but not really. Problematic assumptions were reversed only to be repeated. Up is down; left is right; and the final revisions are expected in a few short months. Today we dive into the first 7 things you need to know.
Episode Links:
.
800-171r3 Final Draft: https://csrc.nist.gov/pubs/sp/800/171/r3/fpd
.
800-171Ar3 Initial Draft: https://csrc.nist.gov/pubs/sp/800/171/a/fpd
.
Protecting CUI Project: https://csrc.nist.gov/projects/protecting-controlled-unclassified-information
.
Sum IT Up: Live (CS2 Denver): https://youtu.be/td8Te1LZfEI?si=Yh7SIM2A9SFjMVMK