7 Things to Know About the 171r3 and 171Ar3 Drafts

The final draft of NIST SP 800-171 revision 3 and the initial draft of SP 800-171A are out. There are simultaneously more and fewer requirements. ODPs have gone away, but not really. Problematic assumptions were reversed only to be repeated. Up is down; left is right; and the final revisions are expected in a few short months. Today we dive into the first 7 things you need to know. Episode Links: . 800-171r3 Final Draft: https://csrc.nist.gov/pubs/sp/800/171/r3/fpd . 800-171Ar3 Initial Draft: https://csrc.nist.gov/pubs/sp/800/171/a/fpd . Protecting CUI Project: https://csrc.nist.gov/projects/protecting-controlled-unclassified-information . Sum IT Up: Live (CS2 Denver): https://youtu.be/td8Te1LZfEI?si=Yh7SIM2A9SFjMVMK