NIST 800-171 Compliance 

The National Institute of Standards and Technology (NIST) has issued important requirements for contractors who handle Controlled Unclassified Information (CUI). These requirements have been developed to ensure that sensitive Federal information remains confidential when stored in and unclassified environment. Here are some of our NIST offerings:

 

ACCESS CONTROL

Access control is a process of granting or denying specific requests to obtain and use information as well as entering specific physical facilities.

AWARENESS & TRAINING

We educate users to create awareness and urgency of security by using a multidisciplinary study of concepts, issues, and principles.

CONFIGURATION MANAGEMENT

We provide guidelines for responsible management and administration of the security of federal information systems and associated environments.

IDENTIFICATION & AUTHENTICATION

We will employ passwords or tokens to authenticate user identities, or multifactor authentication, or some combination thereof.

PERSONNEL SECURITY

We will establish policy and procedures for the effective implementation of selected security controls and control enhancements.

PHYSICAL PROTECTION

It is necessary to verify and enforce physical access and maintain access audit logs, in addition to securing physical devices including keys and combinations.

RISK ASSESSMENT

Learn where your vulnerabilities lie; we’ll assess your company and provide an actionable plan to ensure your compliance.

SECURITY ASSESSMENT

We will evaluate your security controls in place currently, against the NIST standards and establish new policies and procedures as deemed relevant.

SYSTEM & INFORMATION INTEGRITY

This establishes a system for managing risks from system vulnerabilities, it will implement best practices for security, risk, and protection.

Is Your Business in Compliance?

Find Out Today!

Non-compliance can threaten your business in many ways. The government may elect to fine the business in question but they may also elect to terminate or exclude a vendor from the bidding process. Similarly, if you are subject to ethics requirements or industry best practices, failure to abide by these may endanger the future of your business.

Schedule your free compliance consultation today and get this important report that reveals your weaknesses and how we can help.