The National Institute of Standards and Technology's final update to two publications focused on controlled unclassified information puts in place "organization-defined parameters" and the ability for agencies to make determinations on what meets their needs.