NIST SP 800-171 news from Infosec Standards https://infosecstandards.org/standards/nist-800-171 News about NIST SP 800-171, including major updates to our page on it. en-us Proposed FAR CUI rule would extend NIST SP 800-171 Rev. 3 government-wide https://infosecstandards.org/news/far-cui-800-171 https://infosecstandards.org/news/far-cui-800-171 Tue, 04 Aug 2026 00:00:00 GMT The FAR Council proposed a government-wide Controlled Unclassified Information clause that points contractor systems at NIST SP 800-171 Revision 3, with a 72-hour incident window. NIST publishes SP 800-171 Revision 3; DoD contracts stay on Revision 2 https://infosecstandards.org/news/nist-800-171-rev-3-published https://infosecstandards.org/news/nist-800-171-rev-3-published Tue, 14 May 2024 00:00:00 GMT On May 14, 2024, NIST finalized SP 800-171 Revision 3 with 97 requirements in 17 families and a companion assessment guide. Two weeks earlier DoD had pinned its contracts to Revision 2, which is still the version defense contractors are assessed against.