NIST SP 800-171
E532556
NIST SP 800-171 is a U.S. National Institute of Standards and Technology publication that specifies security requirements for protecting Controlled Unclassified Information in non-federal information systems and organizations.
All labels observed (3)
| Label | Occurrences |
|---|---|
| NIST SP 800-171 canonical | 3 |
| NIST SP 800-171A | 1 |
| SP 800-171 | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T5562065 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: NIST SP 800-171 Context triple: [Special Publications, hasPart, NIST SP 800-171]
-
A.
NIST SP 800-67
NIST SP 800-67 is a NIST Special Publication that provides technical guidance and recommendations for the use and implementation of the Triple Data Encryption Algorithm (TDEA/3DES) in federal information systems.
-
B.
NIST SP 800 series
The NIST SP 800 series is a collection of special publications from the U.S. National Institute of Standards and Technology that provide guidelines, recommendations, and technical specifications for information security and risk management.
-
C.
NIST Cybersecurity Framework
The NIST Cybersecurity Framework is a widely adopted set of guidelines and best practices designed to help organizations manage and reduce cybersecurity risk through a structured, risk-based approach.
-
D.
Federal Information Processing Standards
Federal Information Processing Standards are publicly announced, U.S. government–wide standards that define requirements for information security, data formats, and interoperability in federal computer systems.
-
E.
ISO/IEC 27010
ISO/IEC 27010 is an international standard that provides guidelines for information security management and communication in inter-organizational and sector-specific information sharing communities.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: NIST SP 800-171 Target entity description: NIST SP 800-171 is a U.S. National Institute of Standards and Technology publication that specifies security requirements for protecting Controlled Unclassified Information in non-federal information systems and organizations.
-
A.
NIST SP 800-67
NIST SP 800-67 is a NIST Special Publication that provides technical guidance and recommendations for the use and implementation of the Triple Data Encryption Algorithm (TDEA/3DES) in federal information systems.
-
B.
NIST SP 800 series
The NIST SP 800 series is a collection of special publications from the U.S. National Institute of Standards and Technology that provide guidelines, recommendations, and technical specifications for information security and risk management.
-
C.
NIST Cybersecurity Framework
The NIST Cybersecurity Framework is a widely adopted set of guidelines and best practices designed to help organizations manage and reduce cybersecurity risk through a structured, risk-based approach.
-
D.
Federal Information Processing Standards
Federal Information Processing Standards are publicly announced, U.S. government–wide standards that define requirements for information security, data formats, and interoperability in federal computer systems.
-
E.
ISO/IEC 27010
ISO/IEC 27010 is an international standard that provides guidelines for information security management and communication in inter-organizational and sector-specific information sharing communities.
- F. None of above. chosen
Statements (49)
| Predicate | Object |
|---|---|
| instanceOf |
NIST Special Publication
ⓘ
cybersecurity guideline ⓘ information security standard ⓘ |
| appliesTo |
non-federal information systems
ⓘ
non-federal organizations ⓘ |
| basedOn | Federal Information Security Modernization Act ⓘ |
| complianceSupports | protection of federal information in external systems ⓘ |
| controlFamilyExample |
access control
ⓘ
audit and accountability ⓘ awareness and training ⓘ configuration management ⓘ identification and authentication ⓘ incident response ⓘ maintenance ⓘ media protection ⓘ personnel security ⓘ physical protection ⓘ risk assessment ⓘ security assessment ⓘ system and communications protection ⓘ system and information integrity ⓘ |
| countryOfOrigin |
United States
ⓘ
linked to:
United States of America
|
| defines | security requirements for protecting CUI ⓘ |
| doesNotPrimarilyAddress |
availability of information
ⓘ
integrity of information ⓘ |
| firstPublishedBy | National Institute of Standards and Technology ⓘ |
| focusesOn | protection of Controlled Unclassified Information ⓘ |
| hasAbbreviation |
SP 800-171
ⓘ
linked to:
NIST SP 800-171
|
| includes |
basic security requirements
ⓘ
derived security requirements ⓘ |
| intendedFor | organizations outside the federal government ⓘ |
| organizesControlsInto | families of security requirements ⓘ |
| primaryLanguage | English ⓘ |
| publisher | National Institute of Standards and Technology ⓘ |
| regulatoryContext | federal acquisition and contracting requirements for CUI ⓘ |
| relatedTo |
CMMC
ⓘ
DFARS 252.204-7012 ⓘ NIST SP 800-172 ⓘ NIST SP 800-37 ⓘ NIST SP 800-53 ⓘ NIST SP 800-60 ⓘ |
| scope | confidentiality of Controlled Unclassified Information ⓘ |
| subjectArea |
cybersecurity
ⓘ
information security ⓘ risk management ⓘ |
| usedBy |
U.S. Department of Defense contractors
ⓘ
U.S. federal agencies ⓘ federal contractors and subcontractors ⓘ organizations handling Controlled Unclassified Information ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: NIST SP 800-171 Description of subject: NIST SP 800-171 is a U.S. National Institute of Standards and Technology publication that specifies security requirements for protecting Controlled Unclassified Information in non-federal information systems and organizations.
Referenced by (5)
Full triples — surface form annotated when it differs from this entity's canonical label.
linked to: NIST SP 800-171
linked to: NIST SP 800-171