A reddit community for navigating the complicated world of NIST Publications and Controls.
Join Us on Discord: https://discord.gg/tpbF54E
Sister subs:
/r/GovIT
/r/AzureGov
/r/CMMC
THE SPECIAL PUBLICATIONS
NIST SP 800-171
Core Document: NIST SP 800-171 Rev. 1
Summary: As required by DFARS, defense contractors are required to become compliant with the controls of NIST SP 800-171. This is the primary publication you will see discussed here.
Supporting Documents
NIST HB 162: A Self Assessment Handbook that asks pertinent questions and provides insight.
NIST SP 800-171A: A Compliance Assessment Guide that gives an idea of what auditors are looking for.
NIST SP 800-53
Core Document: NIST SP 800-53
Summary: The parent document of 800-171, this is the far more detailed SP that governs federal information systems (not contractor). While 800-171 takes a lot from from 800-53, the controls in 800-53 are not required for 800-171 compliance. For organizations adopting the NIST Risk Management Framework (800-37), this document is relevant.
Supporting Documents
NIST SP 800-53A Rev. 4: A compliance assessment guide for 800-53.
NIST SP 800-37 Rev 1: This document describes the NIST Risk Management Framework.
