The National Institute of Standards and Technology's update to the Special Publication 800-171 series should include guidance on Software Bill of Materials in regards to how contractors are handling the use of controlled unclassified information held on nonfederal systems, according to recent feedback from the Defense Department and the National Security Agency. NIST issued a pre-draft call for comments in July asking how organizations are using the 800-171 series and changes to improve usability and implementation. The DOD chief information...
