NIST 800-171: Protecting Controlled Unclassified Information

NIST Special Publication 800-171 is the control set that governs how non-federal organizations must protect Controlled Unclassified Information (CUI) when it resides in their systems or networks.

FrameworksRGARiskDPSDataIATIdentityIntermediateCUI2,285 words10 min readApr 7, 2026

Last updated Apr 11, 2026v2

CLASSIFICATION: CUI

This article requires CUI clearance or higher.

What you need

Create a free Nexus ID to access CDA proprietary content including PDM domain explainers, methodology deep-dives, and reconnaissance mission briefings.

Create Nexus ID (Free)

Also at this clearance level

DPSDataIntermediateCUI

Table of Contents

NIST 800-171: Protecting Controlled Unclassified Information

What you need

Also at this clearance level

Data Protection and Sovereignty (DPS): The Geological Core

Vulnerability and Surface Defense (VSD): The Oceans

Security for Manufacturing

Security for SaaS Companies

The Academy

The Command Post

The Armory