thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

NIST SP 800-171

NIST requirements for protecting the confidentiality of CUI in nonfederal systems and organizations.

Definition

Rev. 2 contains 110 security requirements in 14 families and is the version referenced by the CMMC program rule and DFARS 7012 class deviation. Rev. 3 (May 2024) restructured to 97 requirements in 17 families with organization-defined parameters aligned to SP 800-53 Rev. 5. CMMC Level 2 is based on these requirements.

Example

A machine shop implements 3.5.3 (multifactor authentication) to meet SP 800-171 Rev. 2.

Exam tip

CMMC Level 2 currently maps to Rev. 2's 110 requirements, not Rev. 3.

Related terms