NIST - National Institute of Standards and Technology

09/16/2026 | Press release | Distributed by Public on 09/17/2026 03:10

Assessing Security Requirements for CUI: NIST SP 800-171Ar3 Small Business Primer

Published
September 16, 2026

Author(s)

Daniel Eliot, Victoria Pillitteri

Abstract

Small businesses juggle many competing priorities with their limited resources (time, budget, IT staff, etc.). A CUI security assessment can be unfamiliar and intimidating to those new and experienced with CUI security requirements. This guide provides small business owners and operators with a high-level overview of NIST Special Publication (SP) 800-171Ar3 (Revision 3), Assessing Security Requirements for Controlled Unclassified Information. The goal of the primer is to help the small business community understand foundational SP 800-171 assessment concepts and basic strategies for planning for an assessment.
Citation
Special Publication (NIST SP) - 1352
Report Number
1352
Pub Type
NIST Pubs

Keywords

CUI, small business, smb, cybersecurity, assessment, security, risk management, confidentiality

Citation

Eliot, D. and Pillitteri, V. (2026), Assessing Security Requirements for CUI: NIST SP 800-171Ar3 Small Business Primer, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.1352, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=962678 (Accessed September 17, 2026)
Additional citation formats

Issues

If you have any questions about this publication or are having problems accessing it, please contact [email protected].

NIST - National Institute of Standards and Technology published this content on September 16, 2026, and is solely responsible for the information contained herein. Distributed via Public Technologies (PUBT), unedited and unaltered, on September 17, 2026 at 09:10 UTC. If you believe the information included in the content is inaccurate or outdated and requires editing or removal, please contact us at [email protected]