NIST SP 800-171 (Non-CUI only) - DIY Assessment

NIST SP 800-171 is a set of security guidelines established by the National Institute of Standards and Technology (NIST) to protect Controlled Unclassified Information (CUI) in nonfederal systems and organizations. These guidelines specify a set of security controls and requirements that must be implemented to safeguard sensitive information from unauthorized access, use, disclosure, and destruction. Compliance with NIST SP 800-171 is mandatory for any nonfederal organization that handles CUI on behalf of the federal government.