Align with NIST 800-171
Secure your government contracts with an automated NIST 800-171 assessment workflow on Isora GRC.
Solutions for NIST 800-171
-
NIST 800-171 Risk Assessment
Conduct a NIST 800-171 assessment and identify critical risks.
-
Supplier Performance Risk System (SPRS) Score
Access scores based on the DoD Assessment Methodology.
-
Plan of Action and Milestones (POA&M)
Export risks into a POA&M and work towards risk mitigation.
-
Evidence Management
Collect and securely store evidence tied to control implementation.
-
Automated Workflow
Save time with automated surveys, notifications, and reporting.
About NIST 800-171
The National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 (NIST 800-171) is an information security framework that provides guidelines for protecting the confidentiality of controlled unclassified information (CUI) when stored in nonfederal information systems.
Several federal agencies require NIST 800-171.
The U.S. Department of Defense (DoD) requires all of its contractors to demonstrate compliance with NIST 800-171 as part of the Defense Federal Acquisition Regulation Supplement (DFARS) and the Cybersecurity Maturity Model Certification (CMMC).
More recently, Federal Student Aid (FSA), an office of the U.S. Department of Education (ED), gave notice of its intent to require NIST 800-171 as part of its proposed Campus Cybersecurity Program. The proposed program applies to all aspects of the administration of Title IV federal student aid programs and builds on the current requirements of the Gramm-Leach-Bliley Act (GLBA).
Ready to get started?
GLBA
DFARS/CMMC
Recommended
Everything about the CMMC: Complete CMMC Guide, 2023 Edition
All you need to know about the CMMC, its framework, compliance requirements, and practical tips for…
Understanding the HIPAA Security Rule: Complete Guide
Learn the essentials of the HIPAA Security Rule, how to safeguard sensitive health information, and…
GLBA Safeguards Rule: Conducting a Risk Assessment
Explore our guide on conducting a risk assessment under the GLBA Safeguards Rule to protect customer…
GLBA Compliance in Higher Education: 2023 Complete Guide
Discover the importance of GLBA compliance in higher education, the role of Privacy and Safeguards…
Understanding the GLBA Safeguards Rule, 2023 Complete Guide
The GLBA Safeguards Rule is a US law that requires financial institutions to implement specific…
How to Build a Risk-Based Infosec Program in Higher Education, Complete Guide
Discover the key steps to building a risk-based infosec risk management program in higher ed for…
Say hello to powerfully simple GRC
The easier solution for mitigating risk, improving compliance, and building resilience
