Webinar to Compare NIST SP 800-171 Revisions and Proposed FAR CUI Rule
A November 12 virtual webinar will compare NIST SP 800-171 Revision 3 with Revision 2 and discuss connections to GSA CUI guidance and the proposed FAR CUI Rule. Contractors, particularly defense firms still using Revision 2, can use the session to inform compliance planning while distinguishing current requirements from proposed changes.
Key Signals
- Webinar compares NIST SP 800-171 Revision 3 with Revision 2 for CUI-handling contractors
- GSA CUI guidance and proposed FAR CUI Rule are on the November 12 agenda
- Contractors should distinguish current obligations from proposed FAR requirements
- Defense contractors using Revision 2 can use the session to inform compliance planning
Federal contractors responsible for protecting Controlled Unclassified Information (CUI) can attend a virtual webinar on November 12, 2026, from 11:00 a.m. to 12:00 p.m. The session, promoted as “Cyber Thursday,” will explain NIST SP 800-171 Revision 3, compare it with Revision 2, and discuss the standard’s relevance to General Services Administration (GSA) CUI guidance and the proposed Federal Acquisition Regulation (FAR) CUI Rule. Registration is available online, and attendees can earn one CPE credit.
The event is relevant to organizations that currently apply Revision 2, including defense contractors handling CUI in support of federal work. A side-by-side discussion of the revisions can help contractor security, compliance, and contracts teams identify areas that may require review and assess the potential implications for planning. The source describes Revision 3 as quickly becoming a benchmark for CUI protection, but does not provide specific technical control changes or claim that every contractor must immediately transition.
A central procurement consideration is the distinction between existing obligations and proposed policy. The FAR CUI Rule is described as proposed, not as a finalized government-wide requirement. Contractors should therefore avoid treating the proposal as an effective rule while tracking its development and evaluating how a future final rule could affect contract clauses, cybersecurity processes, evidence of implementation, and internal compliance schedules. The webinar is intended to support understanding and planning; it does not itself change contractual requirements.
The session offers a timely forum for contractors to connect NIST guidance with federal acquisition context. Organizations may want to use the discussion to review which systems and contract work involve CUI, determine whether their current practices are based on Revision 2, and identify questions for their compliance teams. The announcement directs inquiries to Matt Frost at MattF@WisPro.org. The provided source lists Oshkosh Corporation among vendors, but does not describe a role for the company in the webinar or identify it as the organizer or a participant.
- Event: Virtual webinar on November 12, 2026, from 11:00 a.m. to 12:00 p.m.
- Subject: NIST SP 800-171 Revision 3, its comparison with Revision 2, and implications for CUI protection.
- Federal context: Discussion will include the relevance of GSA CUI guidance and the proposed FAR CUI Rule.
- Target audience: Federal contractors handling CUI, particularly defense contractors currently using Revision 2.
- Compliance takeaway: Assess Revision 3’s potential planning implications without assuming the session establishes new obligations.
- Rule status: The FAR CUI Rule is proposed; the source does not describe it as a finalized government-wide requirement.
- Professional credit: The webinar offers one CPE credit; online registration is available.
- Contact: Direct inquiries to Matt Frost at MattF@WisPro.org.
- Planning action: Review CUI-bearing work and current Revision 2 practices, then track any future rulemaking and contract-specific requirements.
Agencies
- General Services Administration
- National Institute of Standards and Technology
Vendors
- Oshkosh Corporation
Sources
- Cyber Thursday: Summarizing NIST SP 800-171 Revision 3 in support of GSA and FAR, and future Government Compliance - Virtual - Nov 12 @11am https://t.co/h7f2tmvbic NIST SP 800-171 Revision 3 is quickly becoming the benchmark for protecting Controlled Unclassified Information (twitter-contract-vehicles · Nov 10