NIST SP 800-171 & CMMC 2.0 Control 3.1.22 Requirement:

Control information posted or processed on publicly accessible information systems.

NIST SP 800-171 & CMMC 2.0 3.1.22 Requirement Explanation:

A company may accidentally post “Controlled Unclassified Information” (CUI) to its website, social media, or other public location. To prevent this only authorized persons should be allowed to post information publicly. Content like press releases and blog articles may contain or “Controlled Unclassified Information” (CUI). They should be reviewed prior to posting.

Example NIST SP 800-171 & CMMC 2.0 3.1.22 Implementation:

Only allow authorized persons to post information on to your company website and social media. Review information to identify federal contract information and or controlled unclassified information before it is posted.

NIST SP 800-171 & CMMC 2.0 3.1.22 Scenario(s):

- Scenario 1:

Your organization won a federal contract. To advertise this achievement your marketing team prepares a press release. Before posting the press release to your website it is reviewed to identify any “Controlled Unclassified Information” (CUI).

Discover Our NIST SP 800-171 & CMMC 2.0 Solutions:


Compliance Accelerator

Power through compliance. Meet and maintain your NIST SP 800-171 & CMMC 2.0 compliance requirements.

Quantum Assessor

Transform your business. Create new revenue streams and provide scalability for your NIST SP 800-171 and CMMC 2.0 services.

Supply Chain Verifier

Trust is everything. Verify, monitor, and support subcontactor compliance.