NIST 800-171 Support Services & Compliance

Coalfire Federal has been providing NIST 800-171 Support Services to clients for over 15 years. Our dedicated team of cybersecurity compliance professionals can provide your organization with the advisory and assessment expertise required to help your team prepare and achieve compliance.

NIST 800-171 Support Services

Maintain government contract award eligibility by demonstrating compliance with NIST 800-171 for Department of Defense (DoD) Federal Acquisition Regulations Supplement (DFARS) requirements. Federal government mandates and NIST 800-171 compliance can be time consuming and confusing for your internal staff. Coalfire Federal’s NIST-based compliance services takes the burden off you so you can continue doing business as usual.

BACKGROUND

• NIST 800-171 states that nonfederal contractors or subcontractors that collect, store, or transmit covered defense information (CDI) or controlled unclassified information (CUI) on nonfederal systems to the federal government will need to comply by December 31, 2017 or risk losing government contracts. All prime contractors and their subcontractors must comply.
• The DoD has updated the DFARS, requiring contractors to be compliant with NIST 800-171. (252.204-7012.ii.A).
• The interim DFARS rule specifies all contractors and sub-contractors post a current assessment into SPRS by Nov. 30, 2020, as a prerequisite to submitting bids for new contracts or renewing existing contracts with the DoD This applies to both prime contractors and subcontractors.
• DFARS clause 252.204-7008 addresses requirements for safeguarding CDI controls in government contractor systems, which include CDI and CUI. Clause 252.204-7012 addresses the expansion of safeguards to include cyber incident reporting requirements.