NIST 800-171 Controlled Unclassified Information Course

Short video course on the NIST Special Publication 800-171 standard for protecting Controlled Unclassified Information. After an introduction to the material and the overall requirements, it steps through each requirement family — access control, awareness and training, audit and accountability, configuration management, identification and authentication, incident response, maintenance, media protection, personnel and physical protection, risk assessment, security assessment, systems and communications protection, and systems and information integrity — explaining the basic and derived security requirements in each, and closes with a summary and review. Aimed at security, IT, and compliance staff at organizations that store or process CUI, such as contractors working with federal agencies.