Access control
Compare the names and permissions in the exchange with the access decision.
NIST SP 800-171
File sharing for NIST SP 800-171 workflows
Assess how a file containing controlled unclassified information would move between your team and an approved contractor. Start with the system boundary and contract requirements, then test the transfer using sample data.
Start my free trial ↗7 days. Up to 5 users.
No credit card required.
No credit card required.
01 / THE WORK IN PRACTICE
Map the information flow
Identify the source system, receiving organization and people authorized to release the file. Include temporary copies and the recipient’s environment in the review.
Protected handling
Test the proposed handling procedure using representative sample material.
Audit evidence
Trace an approved release from the source record to the recipient activity.
Defined process
Assign someone to approve release and someone to resolve exceptions.
02 / A CLEARER ARCHITECTURE
Match settings to the approved process
Check how the proposed configuration handles identity, permissions, encryption and records. Ask the system owner which evidence they need for their assessment.
01Identity
02Protection
03Access
04Evidence
01Name each participant+
Connect access to the people and organizations approved for the specific task.
02Set the conditions+
Apply authentication, permissions and a useful end date.
03One observable exchange+
Keep the package, participants, access window and resulting activity evidence together so reviewers are not reconstructing the story from several systems.
04Review exceptions+
Focus attention on failed, unusual or incomplete activity instead of routine noise.
CUSTOMER PERSPECTIVES
All customer stories ↗“
“I would highly recommend MX to anyone looking to send and receive secure data quickly and efficiently.”
Daniel FrancisProject Engineer, Envisage Group
Read the story ↗01 / 02
03 / EVIDENCE YOU CAN FOLLOW
Run a representative exchange
Use a fictional package to test the invitation, recipient check and access window. Have a second reviewer reconstruct what happened from the activity record.
EXCHANGE RECORD / ILLUSTRATIVEApproved-CUI-Package.zip✓
Sender verifiedNamed account✓
Protection appliedAES-256 / ASR✓
Recipient authenticatedAccess checks✓
Activity recordedReviewable history✓
Access control
Compare the names and permissions in the exchange with the access decision.
Protected handling
Test the proposed handling procedure using representative sample material.
04 / THE PRACTICAL POSITION
Document findings for the system owner
Capture gaps and open questions against the revision specified for your program. Refer to NIST SP 800-171 Revision 3 for the published requirements.
Access control
Compare the names and permissions in the exchange with the access decision.
Protected handling
Test the proposed handling procedure using representative sample material.
Controls within a wider program. MX can support configured file-exchange safeguards. It does not certify your organization or establish compliance by itself. Confirm the service configuration, contractual terms and suitability for your data before deployment.
GOOD QUESTIONS. CLEAR ANSWERS.
A clearer route.
From the start.
Practical answers about nist sp 800-171 and where MX fits.
How does MX fit this workflow?+
Support controlled unclassified information workflows with named access, permissions, encrypted exchange and detailed transfer records. These measures form one part of a wider NIST SP 800-171 implementation.
Does using MX make our organization compliant?+
No. Technical controls are part of a wider program. Your organization remains responsible for the applicable obligations, risk assessment, policies, permissions and contracts. Confirm any required agreements and service configuration with MX before handling regulated information.
What controls can we apply to a file exchange?+
Named-recipient access, authentication, permissions and expiry settings help define the exchange. Activity records let your team review what happened. The available configuration should be matched to your requirements.
Does MX replace our existing work tools?+
Keep creating, editing and storing files in the systems your team already uses. MX focuses on controlled handoffs, rather than background synchronization, live co-authoring or permanent backup.
What is included in the free trial?+
Try the MX feature set for 7 days with up to 5 users. No credit card is required.
YOUR NEXT EXCHANGE STARTS HERE
Try a sample exchange
Invite a colleague to receive a sample file, then review the access settings and activity together.
7 days freeUp to 5 usersNo credit card
- Full feature access
- Unlimited file size transfers
- Named recipients and MFA
- Custom branding and upload portals