Skip to main content
govconCyber — Federal Cybersecurity Law Reference
Browse requirements
X-CUI-NIST172 Informational

Apply Enhanced Safeguards for High-Value CUI (APT)

Official citation: NIST SP 800-172

Class: informational · Severity: high

Requirement text

NIST SP 800-172

What it means

When CUI is associated with a high-value asset or a critical program, agencies can require the enhanced controls in NIST SP 800-172. These are layered on top of 800-171 to defend against the advanced persistent threat (APT). They are imposed by contract, not by default — check the clause before scoping them.

Required by

  • DIB — 32 CFR Part 2002
  • IT/Cloud — 32 CFR Part 2002

Educational reference only — not legal advice. Consult a qualified assessor or attorney for binding compliance determinations.