Mark Rockwell and Troy Schneider write that Draft Special Publication 800-171 covers controlled but unclassified federal information stored at nonfederal information systems.
The report said government units and academic institutions may store sensitive data for use in scientific research, technology development and other work in support of the federal government.
The draft guidance, which is open for comment through Jan. 16, is the first of three steps that NIST and NARA have planned for this effort, which will include governmentwide CUI directive and acquisition process reforms, the report said.