NIST SP 800-171 Rev 2: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
[Relevant to current CMMC 2.0 Requirements] The NIST SP 800-171 Rev. 2 provides federal agencies with a set of recommended security requirements for protecting the confidentiality of Controlled Unclassified Information (CUI) when such information is resident in nonfederal systems and organizations.