1. Home
  2. |Insights
  3. |NIST Enhances Final Draft of NIST SP 800-172, Enhanced Security Requirements

NIST Enhances Final Draft of NIST SP 800-172, Enhanced Security Requirements

Client Alert | 1 min read | 07.08.20

The National Institute of Standards and Technology (NIST) recently released the final public draft of NIST Special Publication (SP) 800-172, formerly known as Draft NIST SP 800-171B. Building on the security requirements in NIST SP 800-171, the applicable standard under DFARS 252.204-7012, 800-172 provides 34 enhanced requirements to protect Controlled Unclassified Information (CUI) associated with critical programs or high value assets from the risks posed by advanced persistent threats (APTs). 

Unlike prior drafts, 800-172 incorporates the protection strategy and desired effects on the adversary directly into the implementation guidance for each control. The Department of Defense (DoD) expects 800-172 to impact fewer than one percent of defense contractors. However, numerous requirements from Draft 800-171B were incorporated into the Cybersecurity Maturity Model Certification (CMMC) Levels 4 and 5, likely giving commenters the opportunity to affect future CMMC revisions.

Comments for the final public draft are due August 21, 2020.

Contacts

Insights

Client Alert | 4 min read | 11.09.26

CMS Finalizes Its 2026 Organ Procurement Organization Rule

On November 3, 2026, the Centers for Medicare and Medicaid Services (CMS) finalized a follow-up to its 2020 final rule governing conditions of participation for organ procurement organizations (OPO). CMS’s final rule in 2020 set forth outcome measures for OPOs. The latest final rule further cements the new rating structure that will determine which of the 55 OPOs will be recertified at the end of the current cycle. The final rule largely tracks CMS’s proposed rule, which we discuss here, with the following notable exceptions: ...

View All Insights