ANSWER FROM THE CYBERSECURITY EXPERTS:

The National Institute of Standards and Technology (NIST) has published a set of security requirements to protect Controlled Unclassified Information (CUI). This Special Publication 800-171 defines policies that apply to all prime and subcontractor companies conducting business with the Federal Government.