NIST SP 800-171

The  National Institute of Standards and Technology (NIST) , within the U.S. Department of Commerce, creates standards and guidelines pertaining to information security. NIST’s  Special Publication 800-171  focuses on protecting the confidentiality of Controlled Unclassified Information (CUI) in non-federal information systems and organizations, and defines security requirements to achieve that objective. The security controls of NIST 800-171 can be mapped directly to  NIST 800-53 . This mapping is available on page  D-2 of the publication NIST.SP.800-171 .

The Google Cloud services below have undergone an independent third-party assessment that confirms our compliance with NIST 800-53 controls in scope for FedRAMP, which includes all requisite controls described in NIST 800-171.