The National Institute of Standards and Technology (NIST) published its Special Publication 800-171, Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations. As the name suggests, the SP applies to nonfederal information systems and organizations that process, store, or transmit federal controlled unclassified information. The new guidance is step two in a three step plan to ensure confidentiality of sensitive federal information no matter where it is stored.