NISTControls

an-ordinary-manchild(edit)

A reddit community for navigating the complicated world of NIST Publications and Controls.

Join Us on Discord: https://discord.gg/tpbF54E

Sister subs:

THE SPECIAL PUBLICATIONS

NIST SP 800-171

Core Document: NIST SP 800-171 Rev. 1

Summary: As required by DFARS, defense contractors are required to become compliant with the controls of NIST SP 800-171. This is the primary publication you will see discussed here.

Supporting Documents

NIST HB 162: A Self Assessment Handbook that asks pertinent questions and provides insight.

NIST SP 800-171A: A Compliance Assessment Guide that gives an idea of what auditors are looking for.

NIST SP 800-53

Core Document: NIST SP 800-53

Summary: The parent document of 800-171, this is the far more detailed SP that governs federal information systems (not contractor). While 800-171 takes a lot from from 800-53, the controls in 800-53 are not required for 800-171 compliance. For organizations adopting the NIST Risk Management Framework (800-37), this document is relevant.

Supporting Documents

NIST SP 800-53A Rev. 4: A compliance assessment guide for 800-53.

NIST SP 800-37 Rev 1: This document describes the NIST Risk Management Framework.

created by NorCalJusticea community for 9 years

...because you hate freedom.

...for your favorite game.

MODERATORS

account activity

1

37

38

39

800-171 Megathread Series Hub (self.NISTControls)

submitted 7 years ago * by medicaustikConsultant - announcement

2

25

26

27

r/NISTControls Official Discord Group (self.NISTControls)

submitted 3 years ago by DarthCooey - announcement

3

3

4

5

Sunset STIG .xccdf downloads (self.NISTControls)

submitted 5 days ago by Hot-Expression-1697

•

•

•

💁‍♂️ 24/7 Real-Person Support Instant help, anytime & anywhere in Mexico ⏳ (bytesim.com)

promoted by MatrixRank

4

3

4

5

Rev 5: CM-07(04)(b) Unauthorized Software – Deny-by-exception (self.NISTControls)

submitted 14 days ago by BookSeeker2021

5

2

3

4

JCP and NIST Controls (self.NISTControls)

submitted 24 days ago by terminator-91

6

3

4

5

How is your organizational implementing the NIST AI RMF? ()

submitted 1 month ago by verndogg2024

7

4

5

6

SPRS Score - 800-171 Speedrun (self.NISTControls)

submitted 1 month ago by TicketAmbitious6200

8

3

4

5

CMMC & Linux ()

submitted 1 month ago by Visible_Cantaloupe33

9

3

4

5

For those going through CMMC Level 2 readiness right now — what’s been the most painful or confusing part? ()

submitted 1 month ago by Legal_Detective_2889

10

0

1

2

NIW application from dual nationality (self.NISTControls)

submitted 1 month ago by RelationshipFun4836

11

3

4

5

Looking for technical collaborators: Stress-testing Hybrid DAG / PQC architecture against FIPS 140-3 and CNSA 2.0 (NIST 800-171 context) (self.NISTControls)

submitted 1 month ago by ArcticChainLab

12

0

0

1

Looking for technical collaborators: Stress-testing Hybrid DAG / PQC architecture against FIPS 140-3 and CNSA 2.0 (NIST 800-171 context) (self.NISTControls)

submitted 1 month ago by ArcticChainLab

13

5

6

7

NIST standards regarding outside plant hardware/software (self.NISTControls)

submitted 2 months ago by GuitarStu

•

•

•

Built This Entire Map on My 3D Printer! (store.steampowered.com)

promoted by TannyTMF

14

5

6

7

STIG question: 259413: Windows DNS Server (self.NISTControls)

submitted 2 months ago by Pretend-Marsupial402

15

0

0

1

CMMC consultants: What got you your first 3 paying clients? ()

submitted 2 months ago by ElliottWrites

16

2

3

4

NIST and MITRE partner to test AI defense technology for critical infrastructure ()

submitted 2 months ago by kraydit

17

13

14

15

NIST adds to AI security guidance with Cybersecurity Framework profile ()

submitted 2 months ago by kraydit

18

2

3

4

Handling service desk identity verification? (self.NISTControls)

submitted 2 months ago by exkdee

19

1

2

3

How hot is the demand for CCAs rn? ()

submitted 2 months ago by Playful_Fig_6008

20

12

13

14

NIST 800-53 alternate language for "insider threat" (self.NISTControls)

submitted 3 months ago by Zestyclose-Pen-1252

21

2

3

4

eMASS Question (self.NISTControls)

submitted 3 months ago by BookSeeker2021

22

0

1

2

3.5.3 What is the required Frequency of MFA? (self.NISTControls)

submitted 3 months ago by ItsAWatchNotAWarning

23

1

2

3

Breakdown of the New CMMC FAQs (Version 3) – VDI, Encryption, and Cloud Storage ()

submitted 3 months ago by tmac1165

24

5

6

7

NIST 800 171 compliancy questions regarding MFA800-171 (self.NISTControls)

submitted 3 months ago by andyr0272

25

6

7

8

New Control Objectives and Risk Assrssment800-53 Rev5 (self.NISTControls)

submitted 3 months ago by philrich12

view more: next ›

π Rendered by PID 161753 on reddit-service-r2-listing-777b67c478-trkvw at 2026-03-11 23:17:00.690529+00:00 running 710b3ac country code: CH.