20240712 - EXIM 800-171 Attestation Form.pdf
PDF 125 KB Posted
- Attached to
- Credit and Bank Training
- Solicitation number
- 83310126Q0057
- Issued by
-
Export Import Bank of the US
About this file
This document is a NIST SP-800-171 Compliance Attestation Form template designed for vendors to certify their adherence to federal security requirements for protecting controlled unclassified information (CUI) in nonfederal systems and organizations. The form requires vendors to provide standard identifying information including company name, contact person, title, address, phone number, and email address.
The attestation requires vendors to confirm three key compliance elements: (1) that all systems and components storing, processing, or transmitting CUI are covered under the attestation; (2) that a System Security Plan (SSP) has been developed, documented, and implemented in accordance with NIST SP-800-171 standards, including descriptions of system boundaries, operational environments, security implementation methods, and connections to other systems; and (3) that a Plan of Action and Milestones (POA&M) has been developed to document any deficiencies and establish reasonable resolution dates for closing nonconformities. The signatory certifies that the information provided is accurate and that the vendor maintains ongoing compliance with NIST SP-800-171 as of the signature date.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| SF1449_Credit and Bank Training.pdf | ||
| EXHIBIT1-PAST PERFORMANCE QUESTIONNAIRE.docx | DOCX document | |
| 83310126Q0057_solicitation_Credit and Bank Training.pdf | ||
| PRICE SHEET for Credit and Bank Training.xlsx | XLSX spreadsheet | |
| Offeror Self-Evaluation Checklist.docx | DOCX document |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
NIST SP-800-171 Compliance Attestation Form
Vendor Information
• Vendor Name: ______________________
• Contact Person: ____________________
• Title: _____________________________
• Address: ___________________________
• Phone Number: _____________________
• Email: _____________________________
Attestation Statement [Vendor Name] adheres to the security requirements set forth by NIST Special Publication 800- 171, "Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations."
I confirm that our organization has assessed our information systems and processes against the NIST SP-800-171 guidelines and attest to the following:
1. Scope of Compliance:
o All systems and components where controlled unclassified information (CUI) is stored, processed, or transmitted are covered under this attestation.
2. System Security Plan (SSP):
o An SSP has been developed, documented, and implemented as required by NIST
SP-800-171.
o The SSP includes an accurate description of the system boundary, operational environment, how security requirements are implemented, and the relationships with or connections to other systems.
3. Plan of Action and Milestones (POA&M):
o A POA&M has been developed to document any deficiencies and describe how and when any unimplemented security requirements will be addressed.
o POA&Ms are not open ended and have reasonable resolution dates for closure of nonconformities.
Certification: By signing below, I certify that the information provided here is accurate and that [Vendor Name] maintains compliance with NIST SP-800-171 as of the date signed below.
Signature: ___________________________ Date: _______________________________
File details come from the government source that posted it. Updated .