NIST releases draft assessment for protecting CUI of high-value assets

摘要

The National Institute of Standards and Technology has released a draft publication designed to help organizations prepare and conduct assessments on their ability to secure controlled unclassified information for high-value assets maintained in non-governmental systems. The publication is foundational to levels four and five of the Defense Department's Cybersecurity Maturity Model Certification program, which focuses on the protection of CUI. DOD has more stringent requirements to address advanced persistent threat actors in the upper tiers of the program. "Draft NIST SP 800-172A, Assessing Enhanced Security Requirements for Controlled Unclassified Information, provides federal agencies and nonfederal organizations with assessment procedures that can be used to carry out assessments of the requirements in NIST SP 800-172," NIST said Tuesday.