What requirement in the Access Control section of the NIST SP 800-171 2nd revision requires providing privacy and security notices consistent with applicable CUI rules?
The requirement is 3.1.9 from the Access Control section of the SP 800-171
That requirement is 3.1.9.