---
title: What Contractors Risk by Not Being NIST 800-171 Compliant
description: Why contractors need to compliant with NIST SP 800-171 and what risks you take by being non-compliant
---

[Peerless Post | Peerless Tech Solutions ](https://www.getpeerless.com/blog)

# [What Contractors Risk by Not Being NIST 800-171 Compliant](https://www.getpeerless.com/blog/what-contractors-risk-by-not-being-nist-800-171-compliant)

 Written by [Peerless Tech Solutions](https://www.getpeerless.com/blog/author/peerless-tech-solutions) | October 24, 2018

### NIST 800-171 Compliance and Government Contractors

The [National Institute of Standards and Technology](https://www.nist.gov/) SP 800-171 is a set of standards that define how to protect and distribute material that is sensitive but not classified. The Special Publication is a mandate for contractors serving local and federal governments and the deadline for compliance with DFARS and [SP 800-171](https://nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-171.pdf) was December 31, 2017. It lists over 100 security requirements within 14 control categories that must be adhered to. This is the first security mandate that many of the sub-contractors it affects have had to deal with.

### What NIST 800-171 Means For Contractors

DFARS/SP 800-171 is pertinent to both prime and sub-contractors who have defense contracts or are hoping to win new defense contracts. If the contract contains an applicable regulation, a contractor agrees that they are compliant with SP 800-171 when they sign it. Complying with SP 800-171/DFARS is an ongoing process and not a one-time thing.

****Non-compliance could result in immediate contract termination which is something no contractor wants to risk as loosing a contract could close your business. Also, if a contractor claims to be compliant with SP 800-171 and they are not, it could result in criminal fraud as they are misrepresenting facts.

### What To Do If You're Not Compliant

Contractors that have not yet implemented all of the controls need to have a written explanation of how each specific control they do not meet is not applicable to them or an alternative control that is being used to achieve the same results. All 110 controls must be implemented or you must have a written plan in place to implement the controls in a timely fashion. 

[Contact us](https://www.getpeerless.com/about/company/contact-us) to learn more about getting a NIST 800-171/DFARS Compliance assessment completed to see where you stand.

 

[View full post](https://www.getpeerless.com/blog/what-contractors-risk-by-not-being-nist-800-171-compliant)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Peerless Tech Solutions"
  },
  "dateModified" : "2023-03-31T15:52:14.902Z",
  "datePublished" : "2018-10-24T16:53:04Z",
  "headline" : "What Contractors Risk by Not Being NIST 800-171 Compliant",
  "image" : {
    "@type" : "ImageObject",
    "height" : 60,
    "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
    "width" : 60
  },
  "mainEntityOfPage" : "https://www.getpeerless.com/blog/what-contractors-risk-by-not-being-nist-800-171-compliant",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://www.getpeerless.com/hubfs/New%20Peerless%20Logo_Color_No%20Tech-1.png",
      "width" : 103.646835
    },
    "name" : "Peerless Post"
  }
}
```