National Institute of Standards and Technology (NIST) Special Publication 800-171 is a set of standards that define how to safeguard and distribute material deemed sensitive but not classified for organizations doing business with the federal government. Risk assessments identify, estimate, and prioritize risks to organizational operations, assets, individuals, other organizations, and the country, resulting from the operation and use of information systems.