NIST Finalizes Enhanced Security Requirements for Combating Advanced Cyber Threats
Client Alert | 1 min read | 02.09.21
The National Institute of Standards and Technology (NIST) recently released the final version of NIST Special Publication (SP) 800-172, Enhanced Security Requirements for Protecting Controlled Unclassified Information. Designed to supplement the requirements in NIST SP 800-171—the applicable standard under DFARS 252.204-7012—800-172 provides 35 enhanced security requirements to protect controlled unclassified information (CUI) associated with critical programs and high value assets from sophisticated adversaries referred to as advanced persistent threats (APTs).
Although expected to impact relatively few contractors, where applicable, agencies may include select enhanced security requirements from 800-172 in their contract provisions. The Department of Defense (DoD) has also incorporated several of the requirements identified in prior drafts of 800-172 into maturity levels 4 and 5 of the Cybersecurity Maturity Model Certification (CMMC).
Contacts
Partner and Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 10 min read | 03.19.26
[1] In a recent development, the UK Supreme Court ruled that Artificial Neural Networks (ANNs) are not excluded from patentability due to being a computer program “as such.” In doing so, the Court set out the framework of a new test for the UK Intellectual Property Office (IPO) to use when evaluating the patentability of computer. The ruling breaks down barriers to the patenting of AI algorithms in the UK and paves the way for a wider change in the UK IPO’s approach to assessing excluded subject matter.
Client Alert | 6 min read | 03.18.26
CFTC Takes Additional Steps Toward Prediction Market Regulation: What You Need to Know
Client Alert | 4 min read | 03.18.26
Client Alert | 4 min read | 03.18.26
