thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Advanced

NIST SP 800-172

NIST enhanced security requirements for protecting CUI against advanced persistent threats.

Definition

SP 800-172 supplements SP 800-171 with enhanced requirements such as penetration-resistant architecture, damage-limiting operations, and cyber resiliency. CMMC Level 3 requires 24 selected SP 800-172 requirements in addition to Level 2.

Example

A prime contractor on a critical program implements threat hunting and security operations center requirements from SP 800-172.

Exam tip

Level 3 = Level 2 plus selected 800-172 requirements, assessed by DIBCAC.

Related terms