Proposed FAR CUI rule would extend NIST SP 800-171 Rev. 3 government-wide
The FAR Council proposed a government-wide Controlled Unclassified Information clause that points contractor systems at NIST SP 800-171 Revision 3, with a 72-hour incident window.
