What is NIST SP 800-171?

NIST SP 800-171 is a publication of the National Institute of Standards and Technology (NIST) that governs the protection of Controlled Unclassified Information (CUI) in "nonfederal systems and organizations." The 110 security controls that are enumerated in NIST SP 800-171 primarily are geared towards protecting the confidentiality of CUI in nonfederal systems. These 110 security controls are organized into 14 control families that span from administrative to technical control measures.