Employ FIPS-validated cryptography to protect CUI
System and Communications Protection · NIST SP 800-171 Rev 2
Requirement
Employ FIPS-validated cryptography when used to protect the confidentiality of CUI.
Discussion
Cryptography can be employed to support many security solutions including the protection of controlled unclassified information, the provision of digital signatures, and the enforcement of information separation when authorized individuals have the necessary clearances for such information but lack the necessary formal access approvals. Cryptography can also be used to support random number generation and hash generation. Cryptographic standards include FIPS-validated cryptography and/or NSA-app
How this affects your SPRS score
Under the DoD Assessment Methodology, a perfect SPRS score is 110. If this control is not met, Up to 5 points (conditional) may be subtracted from your score. This control has conditional scoring: a partial implementation reduces the deduction to 3 points.
Want your estimated SPRS score?
Answer 15 quick questions covering the highest-impact controls and get an instant estimate.
Estimate my SPRS score →Source: NIST SP 800-171 Rev 2 (public domain) · SPRS weighting per the DoD Assessment Methodology · This is reference information, not an official assessment.