SP 800-171 Rev. 2: Understanding the New Cybersecurity Standard for Defense Contractors
What is SP 800-171 Rev. 2?
SP 800-171 Rev. 2 is a set of cybersecurity requirements developed by the National Institute of Standards and Technology (NIST) to protect controlled unclassified information (CUI) stored on non-federal information systems. Released in 2020 (updates to January 28, 2021), it aligns with NIST’s Cybersecurity Framework (CSF) and aims to safeguard sensitive information, such as technical data, export-controlled information, or sensitive government information.