NIST 800-171 Compliant

Overview

NIST Special Publication 800-171 specifies security requirements for protecting Controlled Unclassified Information (CUI) in nonfederal systems and organizations. It is required for all Department of Defense (DoD) contractors and is a prerequisite for CMMC certification. CodeMiners maintains compliance with all 110 security requirements across 14 control families to support defense industrial base clients.

Governing Body

National Institute of Standards and Technology (NIST), US Department of Commerce

Scope of Certification

Covers 14 control families for CUI protection: access control, awareness and training, audit and accountability, configuration management, identification and authentication, incident response, maintenance, media protection, personnel security, physical protection, risk assessment, security assessment, system and communications protection, and system and information integrity.

Audit and Assessment Process

Self-assessment using the NIST SP 800-171A assessment methodology. Organizations must submit assessment scores to the Supplier Performance Risk System (SPRS). Third-party assessments are required for CMMC Level 2 and above.

Key Requirements

1. Implementation of all 110 security requirements
2. System Security Plan (SSP) for CUI-processing systems
3. Plan of Action and Milestones (POA&M) for gaps
4. SPRS score submission
5. Incident reporting to the DoD within 72 hours

Compliance Entitlements

• Compliance with all 110 CUI protection requirements
• Required for Department of Defense contractor eligibility
• Prerequisite for CMMC Level 2 and Level 3 certification
• Coverage across 14 security control families

Client Benefits

• Enables CodeMiners to handle CUI for defense and government clients
• Required for DoD contract eligibility under DFARS 252.204-7012
• Provides assurance that sensitive government data is properly protected

Related Certifications