NIST SP 800-171 & CMMC 2.0 3.1.22 Requirement:
Control information posted or processed on publicly accessible information systems.
NIST SP 800-171 & CMMC 2.0 3.1.22 Requirement Explanation:
A company may accidentally post “Controlled Unclassified Information” (CUI) to its website, social media, or other public location. To prevent this only authorized persons should be allowed to post information publicly. Content like press releases and blog articles may contain or “Controlled Unclassified Information” (CUI). They should be reviewed prior to posting.
Example NIST SP 800-171 & CMMC 2.0 3.1.22 Implementation:
Only allow authorized persons to post information on to your company website and social media. Review information to identify federal contract information and or controlled unclassified information before it is posted.
NIST SP 800-171 & CMMC 2.0 3.1.22 Scenario(s):
- Scenario 1:
Your organization won a federal contract. To advertise this achievement your marketing team prepares a press release. Before posting the press release to your website it is reviewed to identify any “Controlled Unclassified Information” (CUI).
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you
NIST SP 800-171 & CMMC Compliance
Become compliant, provide compliance services, or verify partner compliance with NIST SP 800-171 and CMMC requirements.
HIPAA Compliance
Become compliant, provide compliance services, or verify partner compliance with HIPAA security rule requirements.
FAR 52.204-21 Compliance
Become compliant, provide compliance services, or verify partner compliance with FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems requirements.
ISO 27001 Compliance
Become compliant, provide compliance services, or verify partner compliance with ISO 27001 requirements.