An Introduction to NIST SP 800-171 for Higher Education Institutions

Organization: EDUCAUSE
Published: April 18, 2016

This introduction to NIST 800-171 provides a brief overview of the special publication, how Controlled Unclassified Information (CUI) is defined, common types of data in higher education that “may” be called CUI, and what intuitional information should be “out of scope.” To illustrate how institutions are currently responding to NIST 800-171, three brief case studies are provided by the University of Notre Dame, the University of Pittsburgh, and North Carolina State University.