Double Whammy: NIST Unveils Draft Enhanced Security Requirements and Revisions to NIST SP 800-171
Client Alert | 1 min read | 06.21.19
The National Institute of Standards and Technology (NIST) has released drafts of NIST SP 800-171 Revision 2 and a companion standard NIST SP 800-171B, designed to protect Controlled Unclassified Information (CUI) from advanced persistent threats (APTs). 800-171B details 33 “enhanced” controls, reflecting core principles of penetration resistance, damage-limiting operations, and resiliency. Specific controls include those related to segregation, hunt teams, AI-enabled tools, IoT security, and supply chain – some of which arguably do not have firm industry definitions.
Unlike the non-substantive updates to Revision 2, 800-171B will apply only to contractors handling CUI that the government determines is part of a “critical program” or is a “high value asset.” A cost estimate from the Department of Defense – expected to quickly implement 800-171B – anticipates that less than one percent of its contractors will be impacted but that (allowable) costs could exceed $1 million.
Comments for all three documents are due July 19, 2019.
Contacts
Partner and Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 5 min read | 09.03.26
The U.S. Department of Transportation (DOT) published a final rule amending 14 CFR Part 234 that fundamentally changes how airlines report the causes of flight delays and cancellations. Effective October 19, 2026, the rule implements Section 511(b) of the FAA Reauthorization Act of 2024 by creating a new reporting category, the “Section 511(b) category,” for ten specific events that Congress determined are not attributable to airline control. The rule simultaneously narrows the existing "Air Carrier" reporting category by expressly excluding those same ten events.
Client Alert | 6 min read | 09.03.26
FDA Seeks Input for Regulating GenAI-Powered Medical Devices
Client Alert | less than 1 min read | 09.03.26
SBA Proposal to Overhaul Size Standards Would Transform Federal Government Contracting
Client Alert | 5 min read | 09.02.26
DOJ’s Civil Rights Fraud Initiative Claims Another DEI-Related FCA Settlement
