US
NIST 800-171 r2 and r3
Requirements for protecting Controlled Unclassified Information outside federal systems, revisions 2 and 3.
Who it applies to
Contractors and universities that handle CUI for the US government.
What it can cost
Lost deals, failed audits and penalties set by your regulator or contract.
- Revisions
- Rev. 2 (110 requirements) and Rev. 3
- Protects
- Controlled Unclassified Information
- Basis for
- CMMC Level 2
What NIST 800-171 r2 and r3 asks of you
- 01Access control
- 02Awareness and training
- 03Audit and accountability
- 04Configuration management
- 05Identification and authentication
- 06Media and system protection
How orta covers NIST 800-171 r2 and r3
110 NIST 800-171 r2 and r3 requirements, mapped
Each requirement is linked to orta's common controls, so evidence you already have counts here too.
Checked from your own systems
Host, Kubernetes and AWS checks run on a schedule and mark controls passing or failing, every day.
Ready for your auditor
Give them a read-only login to see controls, evidence and documents in one place.
