NFO CONTROLS

Non-Federal Organization (NFO) controls are an often-overlooked requirement. NFO controls are found alongside CUI controls in Appendix E of NIST SP 800-171. This is an educational resource to explain what NFO controls are and associated compliance requirements... Note: Unlike CUI and NFO controls, FED and NCO controls are not integral to protecting CUI. The reason for this is CUI and NFO controls are focused on confidentiality requirements, while the FED controls are reserved for US Government usage and NCO controls are focused on integrity and availability. If you can address NCO controls as part of your security program, that is advisable since it focuses on resiliency, but it is not a focus for NIST SP 800-171 or CMMC... ComplianceForge reserves the right to refuse service, in accordance with applicable statutory and regulatory parameters.

Primary location: Sheridan United States