1. Home
  2. |Insights
  3. |NIST Finalizes Enhanced Security Requirements for Combating Advanced Cyber Threats

NIST Finalizes Enhanced Security Requirements for Combating Advanced Cyber Threats

Client Alert | 1 min read | 02.09.21

The National Institute of Standards and Technology (NIST) recently released the final version of NIST Special Publication (SP) 800-172, Enhanced Security Requirements for Protecting Controlled Unclassified Information. Designed to supplement the requirements in NIST SP 800-171—the applicable standard under DFARS 252.204-7012—800-172 provides 35 enhanced security requirements to protect controlled unclassified information (CUI) associated with critical programs and high value assets from sophisticated adversaries referred to as advanced persistent threats (APTs).

Although expected to impact relatively few contractors, where applicable, agencies may include select enhanced security requirements from 800-172 in their contract provisions. The Department of Defense (DoD) has also incorporated several of the requirements identified in prior drafts of 800-172 into maturity levels 4 and 5 of the Cybersecurity Maturity Model Certification (CMMC).

Insights

Client Alert | 5 min read | 05.30.25

DOJ and FTC File Statement of Interest Supporting Antitrust Lawsuit Against Asset Managers’ Climate Goals

On May 22, 2025, the U.S. Department of Justice and the Federal Trade Commission (the “U.S. Antitrust Agencies”) filed a Statement of Interest supporting thirteen states’ claims that asset managers violated antitrust and consumer protection law through their environmental, social, and governance (“ESG”) activities. The Statement, which opposes the asset managers’ motion to dismiss the antitrust claims, indicates the federal antitrust agencies support antitrust theories favored by anti-ESG activists, which may lead to federal investigations and lawsuits based on such theories....