The National Institute of Standards and Technology has finalized its guidance on how to implement measures to protect sensitive federal information in the hands of government contractors.
NIST said Friday it worked with the National Archives and Records Administration to develop the “Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations” (NIST Special Publication 800-171) document.
The guidance works to help federal agencies ensure the confidentiality of controlled unclassified information held in nonfederal information systems, NIST added.
“Together with NARA’s recently proposed CUI regulation and a planned Federal Acquisition Regulation clause, we will bring clarity and consistency to the handling of CUI across government,” said John Fitzpatrick, director of the Information Security Oversight Office at NARA.
The full abstract of the manuscript is published on the NIST website.
