Skip to main content
govconCyber — Federal Cybersecurity Law Reference
Back to results
NIST 800-171 R-3.13.8

Encrypt CUI in Transmission

Official citation: 3.13.8

Class: core · Severity: critical

Statement of the obligation — verify against source

3.13.8

What it means

Encrypt CUI during transmission to prevent unauthorized disclosure, unless equivalent physical safeguards protect the path. Cryptographic protection keeps CUI unreadable if network traffic is intercepted; use FIPS-validated cryptography.

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.