The deadline for compliance with NIST 800-171 was December 31, 2017. NIST 800-171 contains 109 specific things that you, as a government contractor, must do to help protect the United States against cybersecurity attacks. NIST 800-171 was developed by the National Institute of Standards and Technology (NIST) to provide standards of protecting CUI. It specifically states what is considered CUI and how to properly mark the information. The CUI Registry contains information about the categories and subcategories of CUI. Instead of using designations like “For Official Use Only” or “Sensitive But Unclassified”, the designation CUI is used instead. What does that actually mean? CUI is information created or owned by the US government and needs to be protected due to a law, regulation or government-wide policy.

information that requires safeguarding or dissemination controls pursuant to and consistent with applicable law, regulations, and government-wide policies but is not classified under Executive Order 13526 or the Atomic Energy Act, as amended. Talk to us! What is Controlled Unclassified Information (CUI)?Īccording to the National Archives and Records Administration (NARA), Controlled Unclassified Information (CUI) is:

Is dropbox secure for fouo