NIST SP 800-171 revision 3 and SP 800-171A revision have been officially released. Although revision 3 won't be required for defense contractors for some time, it pays to see exactly what the future holds. On the surface revision 3 has fewer requirements than revision 2. However, under the hood of 171Ar3 there is actually a 32% increase in the number of verification questions that need to be answered. Overall, 171r3 is progress in the right direction even if it comes with a few warts.

Episode Links:

SP 800-171r3: https://csrc.nist.gov/pubs/sp/800/171/r3/final

SP 800-171Ar3: https://csrc.nist.gov/pubs/sp/800/171/a/r3/final