The National Institute of Standards and Technology SP 800-171 is a set of standards that define how to protect and distribute material that is sensitive but not classified. The Special Publication is a mandate for contractors serving local and federal governments and the deadline for compliance with SP 800-171 was December 31, 2017. It lists over 100 security requirements within 14 control categories that must be adhered to. This is the first security mandate that many of the sub-contractors it affects have had to deal with.
SP 800-171 is pertinent to both prime and sub-contractors who have defense contracts or are hoping to win new defense contracts. If the contract contains an applicable regulation, a contractor agrees that they are compliant with SP 800-171 when they sign it. Complying with SP 800-171 is an ongoing process and not a one-time thing.
Non-compliance could result in immediate contract termination. Also, if a contractor claims to be compliant with SP 800-171 and they are not, it could result in criminal fraud as they are misrepresenting facts.
Contact us to learn more about NIST 800-171 Compliance.