Skip to main content
govconCyber — Federal Cybersecurity Law Reference
Back to results
NIST 800-171 R-3.13.16

Protect Confidentiality of CUI at Rest

Official citation: 3.13.16

Class: core · Severity: high

Statement of the obligation — verify against source

3.13.16

What it means

Protect the confidentiality of CUI at rest — stored on servers, workstations, and media — typically through encryption or equivalent protections, so stored CUI stays unreadable to anyone without authorization.

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.