Organizations planning to do business with the U.S. government must meet guidelines and standards for protecting this information and the systems that process it. These standards are (NIST SP 800-171) Special Publication: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations