The CUI enhanced security requirements in (SP 800-172) are organized into 10 families. The process to assess the CUI enhanced security requirements include preparing for assessment, developing assessment plans, conducting assessments, and analyzing results.
The CUI Enhanced Security Requirement Families are:
Access Control, Awareness, and Training, Configuration Management, Identification and Authentication, Incident Response, Personnel Security, Risk Assessment Security Assessment, System and Communications Protection, and System and Information Integrity.
In our next Blog Post, we will walk you through the Assessment Procedures.