NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements

Access Control and Identification

NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements 3.7: Establish and Maintain a Data Classification Scheme

Establish and maintain an overall data classification scheme. Example labels include Sensitive, Confidential, and Public. Review and update annually.

Other controls in Access Control and Identification

3.1 Physical Security
3.1.1 All security policies and operational procedures that are identified in Requirement 3 are: • Documented. • Kept up to date. • In use. • Known to all affected parties
3.1.2 Roles and responsibilities for performing activities in Requirement 3 are documented, assigned, and understood
3.7.1 Key-management policies and procedures are implemented to include generation of strong cryptographic keys used to protect stored account data

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements controls