United States of America: National Institute of Standards and Technology's publication on enhanced security requirements for protecting controlled unclassified information, including cyber resiliency objectives (SP 800-172)

Progress

Current status
processing consultation
14 Nov 2025 processing consultation
29 Sep 2025 in consultation

Scope

Implementers
United States of America
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
other service provider
Government Branch
executive
Government Body
other regulatory body
Implementation Level
national

Timeline of events

14 Nov 2025
processing consultation

National Institute of Standards and Technology closes consultation on on enhanced security requirements for protecting controlled unclassified information, including cyber resiliency objectives

On 14 November 2025, the National Institute of Standards and Technology (NIST) closes the public consultation on the enhanced security requirements for protecting controlled unclassified information. The publication applies to non-federal systems a…

Source
Event type order
Action type consultation closed
Government branch executive
Government body other regulatory body
29 Sep 2025
in consultation

National Institute of Standards and Technology opened consultation on enhanced security requirements for protecting controlled unclassified information, including cyber resiliency objectives

On 29 September 2025, the National Institute of Standards and Technology (NIST) opened a public consultation on the enhanced security requirements for protecting controlled unclassified information, until 14 November 2025. The publication applies to…

Source
Event type order
Action type consultation opened
Government branch executive
Government body other regulatory body