The National Institute of Standards and Technology (NIST) released NIST SP 800-171 in 2015. The primary objective was to ensure the protection of controlled unclassified information (CUI) in nonfederal agencies. A year later, DFARS (Defense Federal Acquistion Regulation Supplement) added the 252.204...