Reference / NIST SP 800-171 Rev 2

110 controls. 14 families. One reference.

A practitioner reference for every control in NIST SP 800-171 Rev 2, with assessment objectives, examine, interview, and test methods, and field notes from our practice.

Controls

110

Families

Objectives

320

Levels covered

L1 + L2

AC L1+L2

Access Control

22 controls · 70 objectives

AU L2 only

Audit and Accountability

9 controls · 29 objectives

AT L2 only

Awareness and Training

3 controls · 9 objectives

CM L2 only

Configuration Management

9 controls · 44 objectives

IA L1+L2

Identification and Authentication

11 controls · 25 objectives

IR L2 only

Incident Response

3 controls · 14 objectives

MA L2 only

Maintenance

6 controls · 10 objectives

MP L1+L2

Media Protection

9 controls · 15 objectives

PS L2 only

Personnel Security

2 controls · 4 objectives

PE L1+L2

Physical Protection

6 controls · 16 objectives

RA L2 only

Risk Assessment

3 controls · 9 objectives

CA L2 only

Security Assessment

4 controls · 14 objectives

SC L1+L2

System and Communications Protection

16 controls · 41 objectives

SI L1+L2

System and Information Integrity

7 controls · 20 objectives

Begin the conversation

Your contract eligibility is on a clock. Let’s get to work.

A 30-minute scoping call with a senior consultant. No pitch. We listen, scope honestly, and tell you what we’d do — including whether we are the right fit.

Request a scoping call →