NIST releases guidance to protect controlled unclassified information from advanced cyber threats. The new publication addresses the protection of CUI for system components by promoting penetration-resistant architecture, damage-limiting operations, and designs to achieve cyber resiliency and survivability. The protection of sensitive federal information resides in nonfederal systems is of paramount importance, as it can directly impact the federal government’s ability to carry out its operations. A hack in 2018 that compromised sensitive information directly inspired the work on SP 800-172.
Source: https://www.helpnetsecurity.com/2021/02/04/protect-controlled-unclassified-information/