# NIST 800-171 3.1.19 Encrypt CUI on mobile devices and mobile computing platforms.[23]

- Source: https://support.icompaas.com/support/solutions/articles/62000229257-nist-800-171-3-1-19-encrypt-cui-on-mobile-devices-and-mobile-computing-platforms-23-
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [NIST](https://support.icompaas.com/support/solutions/62000112528) › [800-171](https://support.icompaas.com/support/solutions/folders/62000168440)
- Last updated: 2026-05-29
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Description:** 

Organizations can employ full-device encryption or container-based encryption to protect the confidentiality of CUI on mobile devices and computing platforms. Container-based encryption provides a more fine-grained approach to the encryption of data and information including encrypting selected data structures such as files, records, or fields. See \[NIST CRYPTO\].  
  
\[23\] Mobile devices and computing platforms include, for example, smartphones and tablets. 

  

**Priority:** High 

  

**Category: Network Security** 

  

**Services Associated with AWS:** 

-   AWS Key Management Service (KMS), AWS Secrets Manager, AWS Mobile Hub  
    

  

**Objective Evidence:** 

-   Administrative: documented policies, standards & procedures 
-   Administrative: supporting documentation to demonstrate the "secure practices" used to build technology platform-specific secure baseline configurations 
-   Administrative: supporting documentation to demonstrate how Mobile Device Management (MDM) is properly & securely implemented 
-   Technical: screen shot of MDM settings  
    

  

**Possible Technology Considerations:** 

-   **Mobile Device Management (MDM) Secure Baseline Configurations (SBC)** 

  

**What needs to be answered:**

Does the company encrypt CUI on mobile devices?

  

-   Implement Full-Device Encryption for Mobile Devices  
    Description: This check ensures that full-device encryption is implemented on mobile devices to protect the confidentiality of Controlled Unclassified Information (CUI) stored on those devices. Full-device encryption ensures that all data and information on the device are encrypted.
-   Employ Container-Based Encryption for Mobile Computing Platforms  
    Description: This check verifies that container-based encryption is employed on mobile computing platforms to protect the confidentiality of CUI. Container-based encryption provides a more fine-grained approach to encrypting data and information, allowing for the encryption of selected data structures such as files, records, or fields.  

  

**More details:** All access to CUI information cloud based. CUI within cloud system is encrypted and secured at all times.

## Related compliance guidance

- [NIST SP 800-53 Rev. 5: a practical implementation guide for cloud teams](https://support.icompaas.com/compliance/nist-sp-800-53-rev-5): How the 800-53 catalogue, baselines and the Risk Management Framework fit together, and which controls take the most work in the cloud.
- [NIST SP 800-171 and CMMC: a practical guide to protecting CUI in the cloud](https://support.icompaas.com/compliance/nist-sp-800-171-rev-3): If the driver is a DoD or federal contract handling CUI, 800-171 (and CMMC) is the scope you actually need.