Designing and Implementing a NIST 800-171 Compliance Program

The Department of Defense established DFARS 252.204-701, which specifies that any research containing Controlled Unclassified Information (CUI) be protected using NIST 800-171. This presentation will discuss the University of Connecticut's approach to implementing the NIST 800-171 framework, including contracting, faculty engagement, infrastructure implementation, training, and controls review.

Outcomes: Understand the requirements of DFARS 252.204-7012, with a review of the 14 control families in NIST 800-171 * Identify key elements necessary to implement a successful program * Articulate a strategy for complying with both the technical and administrative controls of NIST 800-171