Understanding the NIST 800-171 controls

Identify, analyze and prioritize risks to operations, assets, employees and other organizations.

Ensure employees, contractors and vendors are sufficiently vetted and approved before granting access to systems.

Maintain hardware, firmware and software to ensure that systems are secure and operating correctly.

Identify and verify a user, process or device to prevent unauthorized individuals or processes from accessing systems.

Create, retain and protect logs for the monitoring, analysis, investigation and reporting of unlawful or unauthorized system activity.

Limit access to authorized users, processes acting on behalf of authorized users and authorized devices.

Defend against improper information modification or destruction.

Evaluation of security controls to ensure that they are implemented correctly, operating as correctly and keeping systems secure.

Defend systems, buildings and related infrastructure from unauthorized access.

Protect system media such as disks, tapes, flash drives, CDs, DVDS, microfilm or paper.

Standard operating procedures (SOP) to be followed when incidents occur.

Create and maintain the integrity of systems through control over the initialization, change and monitoring of systems.

Ensure that users are aware of their responsibilities and teach them about best practices.

An overview of the 14 requirements families.

Monitor, control and protect communications.