NIST SP 800-171 REV. 3 System and Services Acquisition
Ensure that the organization uses products, systems, and services from organziations that meet organization defined security requirements.
-
03.16.01 Security Engineering Principles
Apply the following systems security engineering principles to the development or modification of the system and system components: [Assignment: organization- defined systems security engineering principles].
-
03.16.02 Unsupported System Components
Replace system components when support for the components is no longer available from the developer, vendor, or manufacturer.
-
03.16.03 External System Services
Require the providers of external system services used for the processing, storage, or transmission of CUI to comply with the following security requirements: [Assignment: organization-defined security requirements].
Need help putting this into practice? See our NIST SP 800-171 & CMMC compliance services or read our NIST SP 800-171 & CMMC articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo