NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements

Access Control and Identification

NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements 3.1: Physical Security

Prevent unauthorised physical access to sensitive equipment, workplace environments, hosting sites, and storage.

Other controls in Access Control and Identification

3.1.1 All security policies and operational procedures that are identified in Requirement 3 are: • Documented. • Kept up to date. • In use. • Known to all affected parties
3.1.2 Roles and responsibilities for performing activities in Requirement 3 are documented, assigned, and understood
3.7 Establish and Maintain a Data Classification Scheme
3.7.1 Key-management policies and procedures are implemented to include generation of strong cryptographic keys used to protect stored account data

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements controls