Welcome to the NIST SP 800-171 Questionnaire (Ref:1.1 ...

listed in the CUI Registry. The requirements apply only to components9 of non-federal information systems that process, store, or transmit CUI, or that provide security protection for such components.” NIST 800-171 Rev.1 states: "Nonfederal organizations describe in a system security plan (SSP), how the CUI ................
................