NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements 3.1.1: All security policies and operational procedures that are identified in Requirement 3 are: • Documented. • Kept up to date. • In use. • Known to all affected parties

All security policies and operational procedures that are identified in Requirement 3 are: • Documented. • Kept up to date. • In use. • Known to all affected parties

Other controls in Access Control and Identification

3.1 Physical Security
3.1.2 Roles and responsibilities for performing activities in Requirement 3 are documented, assigned, and understood
3.7 Establish and Maintain a Data Classification Scheme
3.7.1 Key-management policies and procedures are implemented to include generation of strong cryptographic keys used to protect stored account data

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements controls