NIST SP 800-171 Rev 2: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
The NIST SP 800-171 provides federal agencies with a set of recommended security requirements for protecting the confidentiality of Controlled Unclassified Information (CUI) when such information is resident in nonfederal systems and organizations.