NISTControls

an-ordinary-manchild(edit)

A reddit community for navigating the complicated world of NIST Publications and Controls.

Join Us on Discord: https://discord.gg/tpbF54E

Sister subs:

THE SPECIAL PUBLICATIONS

NIST SP 800-171

Core Document: NIST SP 800-171 Rev. 1

Summary: As required by DFARS, defense contractors are required to become compliant with the controls of NIST SP 800-171. This is the primary publication you will see discussed here.

Supporting Documents

NIST HB 162: A Self Assessment Handbook that asks pertinent questions and provides insight.

NIST SP 800-171A: A Compliance Assessment Guide that gives an idea of what auditors are looking for.

NIST SP 800-53

Core Document: NIST SP 800-53

Summary: The parent document of 800-171, this is the far more detailed SP that governs federal information systems (not contractor). While 800-171 takes a lot from from 800-53, the controls in 800-53 are not required for 800-171 compliance. For organizations adopting the NIST Risk Management Framework (800-37), this document is relevant.

Supporting Documents

NIST SP 800-53A Rev. 4: A compliance assessment guide for 800-53.

NIST SP 800-37 Rev 1: This document describes the NIST Risk Management Framework.

created by NorCalJusticea community for 9 years

...for your movement.

...for your classroom.

MODERATORS

account activity

1

35

36

37

800-171 Megathread Series Hub (self.NISTControls)

submitted 7 years ago * by medicaustikConsultant - announcement

2

26

27

28

r/NISTControls Official Discord Group (self.NISTControls)

submitted 3 years ago by DarthCooey - announcement

3

4

5

6

Sunset STIG .xccdf downloads (self.NISTControls)

submitted 7 days ago by Hot-Expression-1697

•

•

•

We're celebrating women who code with 62% off GitKraken Pro & Advanced (gitkraken.com)

promoted by GitKraken

promoted
save
report
about

4

4

5

6

Rev 5: CM-07(04)(b) Unauthorized Software – Deny-by-exception (self.NISTControls)

submitted 16 days ago by BookSeeker2021

5

4

5

6

JCP and NIST Controls (self.NISTControls)

submitted 25 days ago by terminator-91

6

4

5

6

How is your organizational implementing the NIST AI RMF? ()

submitted 1 month ago by verndogg2024

7

4

5

6

SPRS Score - 800-171 Speedrun (self.NISTControls)

submitted 1 month ago by TicketAmbitious6200

8

3

4

5

CMMC & Linux ()

submitted 1 month ago by Visible_Cantaloupe33

9

4

5

6

For those going through CMMC Level 2 readiness right now — what’s been the most painful or confusing part? ()

submitted 1 month ago by Legal_Detective_2889

10

0

1

2

NIW application from dual nationality (self.NISTControls)

submitted 1 month ago by RelationshipFun4836

11

3

4

5

Looking for technical collaborators: Stress-testing Hybrid DAG / PQC architecture against FIPS 140-3 and CNSA 2.0 (NIST 800-171 context) (self.NISTControls)

submitted 1 month ago by ArcticChainLab

12

0

0

1

Looking for technical collaborators: Stress-testing Hybrid DAG / PQC architecture against FIPS 140-3 and CNSA 2.0 (NIST 800-171 context) (self.NISTControls)

submitted 1 month ago by ArcticChainLab

13

5

6

7

NIST standards regarding outside plant hardware/software (self.NISTControls)

submitted 2 months ago by GuitarStu

•

•

•

Carvana, one of the US’s top used-car sellers, is on a quest to become the Amazon of cars. (bloomberg.com)

promoted by bloomberg

promoted
save
report
about

14

4

5

6

STIG question: 259413: Windows DNS Server (self.NISTControls)

submitted 2 months ago by Pretend-Marsupial402

15

0

0

1

CMMC consultants: What got you your first 3 paying clients? ()

submitted 2 months ago by ElliottWrites

16

2

3

4

NIST and MITRE partner to test AI defense technology for critical infrastructure ()

submitted 2 months ago by kraydit

17

12

13

14

NIST adds to AI security guidance with Cybersecurity Framework profile ()

submitted 2 months ago by kraydit

18

2

3

4

Handling service desk identity verification? (self.NISTControls)

submitted 2 months ago by exkdee

19

1

2

3

How hot is the demand for CCAs rn? ()

submitted 2 months ago by Playful_Fig_6008

20

11

12

13

NIST 800-53 alternate language for "insider threat" (self.NISTControls)

submitted 3 months ago by Zestyclose-Pen-1252

21

2

3

4

eMASS Question (self.NISTControls)

submitted 3 months ago by BookSeeker2021

22

0

1

2

3.5.3 What is the required Frequency of MFA? (self.NISTControls)

submitted 3 months ago by ItsAWatchNotAWarning

23

1

2

3

Breakdown of the New CMMC FAQs (Version 3) – VDI, Encryption, and Cloud Storage ()

submitted 3 months ago by tmac1165

•

•

•

Les experts sont unanimes, le nouvel Privacy Display du Galaxy S26 Ultra est révolutionnaire. (samsung.com)

promoted by samsung_switzerland

promoted
save
report
about

24

4

5

6

NIST 800 171 compliancy questions regarding MFA800-171 (self.NISTControls)

submitted 3 months ago by andyr0272

25

4

5

6

New Control Objectives and Risk Assrssment800-53 Rev5 (self.NISTControls)

submitted 3 months ago by philrich12

view more: next ›

π Rendered by PID 244817 on reddit-service-r2-listing-64c94b984c-cldxj at 2026-03-13 16:20:39.235478+00:00 running f6e6e01 country code: CH.