NIST SP 800-171 Rev 3 — Protecting CUI

Security requirements for protecting Controlled Unclassified Information (CUI) in nonfederal systems and organizations. Basis for CMMC certification. Required for DoD contractors.