Lead the Transition to NIST SP 800-171 Revision 3

NIST SP 800-171 Revision 3 brings changes that federal contractor leaders need to understand before directing an update to their cybersecurity program. This free executive level course explains the revised requirements, organization-defined parameters, and their potential effects on policies, system security plans, technology, suppliers, and assessment evidence. You’ll leave with a practical view of the decisions your organization needs to make, the questions to ask your team, and where expert assistance may help.

Enroll in the Free Course

What you’ll take away

By the end of this free executive briefing, you’ll be able to:

  • Explain how NIST SP 800-171 Revision 3 changes the work required of your organization.

  • Identify where revised requirements may affect governance, policies, system security plans, technology, and suppliers.

  • Recognize decisions your organization must make about system boundaries and organization-defined parameters.

  • Ask your team focused questions about implementation, documentation, and assessment evidence.

  • Set priorities for a practical Revision 3 readiness plan and determine where outside expertise could help.

Inside the Course

    1. Module 1 — Why Revision 3 Matters to Leadership

    2. Module 2 — Understand the Revision 3 Model

    3. Module 3 — Define Scope, Accountability, and Risk Decisions

    4. Module 4 — Implement Revision 3 as an Operating System

    5. Module 5 — Document the Program and Build Evidence

    6. Module 6 — Assess, Remediate, and Sustain

    7. Module 7 — Choose the Right Starting Path

    8. End-of-Course Evaluation

    9. End-of-Course Survey

About this course

  • Free
  • 9 lessons
  • 0.5 hours of video content

Meet your instructor

Brian Hubbard

Lead CCA

Brian Hubbard is President of Evolved Cyber and has more than 40 years of cybersecurity experience supporting federal contractors, the defense community, and the intelligence community. A Lead Certified CMMC Assessor and CMMC instructor, he has led certification assessments and helped organizations prepare to demonstrate how their security programs work in practice. Brian also contributed to the original NIST Cybersecurity Framework. In this course, he brings that experience to NIST SP 800-171 Revision 3, helping leaders understand its implications for governance, systems, documentation, suppliers, and assessment readiness.

Common Questions

  • Who is this course for?

    This course is designed for executives, directors, program leaders, and other decision makers at federal contractors who need to understand the business implications of NIST SP 800-171 Revision 3.

  • Do I need a technical background?

    No. The course explains the key changes in plain language and focuses on the decisions leaders need to guide, fund, and oversee.

  • Is the course free?

    Yes. You can enroll and complete this executive briefing at no cost.

  • Will this course tell us exactly what to change in our systems?

    It will help you identify likely areas of impact and the questions to ask your team. Specific changes depend on your contracts, systems, information flows, and current implementation.

  • Does completing the course mean our organization is compliant?

    No. The course provides leadership guidance; it does not assess your organization or determine compliance. It will help you plan the more detailed review and implementation work that may be needed.

  • What should I do after the course?

    Bring your security, operations, contracts, and leadership teams together to review applicable obligations, confirm your system boundary, identify gaps, and assign owners for the next steps.

Get a clear view of what Revision 3 means for your organization.

Enroll in the Free Course.