The National Institute of Standards and Technology (NIST) has issued new guidance aimed at protecting federal data that’s stored on information systems outside the federal government.
Special Publication 800-171, Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations, applies to information systems and organizations outside of the federal government that process, store or transmit federal controlled unclassified information, or CUI.
CUI is any information that the federal government requires to be safeguarded by security and/or privacy controls, excluding information that is deemed classified, which is protected under a different set of regulations.
Keep reading this article at: http://www.govinfosecurity.com/securing-federal-data-on-nonfederal-systems-a-8328/op-1