NIST SP 800-171
What is NIST SP 800-171?
Protecting Controlled Unclassified Information in Nonfederal Systems. It comprises 93 controls organised across 30 domains, published by NIST, and applies in the United States.
How NIST SP 800-171 maps to other frameworks
All 93 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 30 domains NIST SP 800-171 groups its controls into
Where NIST SP 800-171 overlaps with the standards you already hold
Where to get trained on NIST SP 800-171
3 courses in the catalogue cover NIST SP 800-171 directly. Each is self-paced, includes the downloadable toolkit and the implementation playbook, and carries a certificate of completion.
What NIST SP 800-171 means in your sector
What NIST SP 800-171 means for your job
Questions people ask about NIST SP 800-171
What is NIST SP 800-171?
How many controls does NIST SP 800-171 have?
Where does NIST SP 800-171 apply?
What frameworks does NIST SP 800-171 map to?
How do I get started with NIST SP 800-171 compliance?
Query NIST SP 800-171 programmatically
NIST SP 800-171, its 93 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
NIST SP 800-171 API reference and MCP config →What NIST SP 800-171 requires, control by control
Each page carries the requirement text for one NIST SP 800-171 control and what an assessor expects to see as evidence.
- 171-AC-1 Access Control Policy and Procedures
- 171-AC-2 Least Privilege and Separation of Duties
- 171-AC-3 Remote Access and Mobile Devices
- 171-CM-1 Baseline Configuration and Inventory
- 171-IA-1 Identification and Authentication
- 171-IA-2 Multi-Factor Authentication
- 171-RA-1 Risk Assessment
- 171-RA-2 Vulnerability Scanning and Remediation
- 171-SC-1 Boundary Protection
- 171-SC-2 Encryption of Controlled Unclassified Information
How ready are you for NIST SP 800-171?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.