NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements 3.12: Segment Data Processing and Storage Based on Sensitivity

Segment data processing and storage based on the sensitivity of the data. Do not process sensitive data on enterprise assets intended for lower-sensitivity data.

Other controls in Audit, Assessment, and Monitoring

3.11 Encrypt Sensitive Data at Rest
3.3 Configure Data Access Control Lists
3.3.1 SAD is not stored after authorization, even if encrypted. All sensitive authentication data received is rendered unrecoverable upon completion of the authorization process
3.4 Enforce Data Retention

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements controls