Atch 2b NIST SP 800-171 Entry Guide.pdf
PDF 791 KB Posted
- Attached to
- Amendment 03: Replace Underground Storage Tank (UST) at Launch Facility (LF) D-02 (Banner County, NE)
- Solicitation number
- FA461326R0002
About this file
This is a quick entry guide for the Supplier Performance Risk System (SPRS) NIST SP 800-171 Assessment Database, version 3.2.13, published in December 2020.
The document provides step-by-step instructions for users to access and enter NIST SP 800-171 assessments through the SPRS application. Access requires a "SPRS Cyber Vendor User" role through the PIEE (Personnel Identity Enterprise Environment) portal at https://piee.eb.mil/piee-landing/. Users must first create a header associated with their Highest Level Owner (CAGE) code, which is required for each HLO and imported from the System for Award Management (SAM); updates typically flow to SPRS within 48 hours. The header page displays up to four rows per HLO corresponding to four confidence levels: Basic, Medium, High Virtual, and High On-site. Users navigate to the Details View by selecting a company name at the desired confidence level, then can add new assessments or edit existing ones using the "+ Add New Assessment" button and pencil icon respectively. Assessment entries require completion of specific fields including assessment date, score, assessing scope, plan of action completion date, System Security Plan (SSP) information, SSP version/revision, SSP date, and included CAGE(s). The database contains data associated with NIST SP 800-171 assessments, which aim to protect Controlled Unclassified Information (CUI) in nonfederal systems and organizations.
View the file
Other files
Show all 21
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Approved for public release, distribution is unlimited.
NIST SP 800-171
QUICK ENTRY GUIDE
VERSION 3.2.13
NSLC PORTSMOUTH BLDG. 153-2 PORTSMOUTH NAVAL SHIPYARD, PORTSMOUTH, NH 03804-5000
NIST SP 800-171 Quick Entry Guide SPRS 3.2.13
Version 3.2.13 DEC 2020 1
1. NIST SP 800-171 Assessment Database: The purpose of the National Institute of
Standards and Technology (NIST) Special Publication (SP) 800-171 is to protect Controlled Unclassified Information (CUI) in Nonfederal Systems and Organizations.
This database contains data associated with NIST SP 800-171 Assessments.
2. PIEE Access: A “SPRS Cyber Vendor User” role is required to enter Basic Assessment information. Step-by-step PIEE Access Instructions can be found here.
https://www.sprs.csd.disa.mil/pdf/SPRS_Access_Instructions.pdf
3. SPRS Application Access: To Access SPRS, follow the below steps:
a. PIEE landing page: https://piee.eb.mil/piee-landing/
b. Click “log-in” and follow prompted log-in steps
1Screenshot Dtd 2 NOV 2020
c. Select the SPRS Icon:
d. Select NIST 800-171 Assessment:
3.1 Creating a Header: A “Header” is required for each Highest Level Owner (HLO)
CAGE. If one does not already exist for your HLO, it may be created by selecting the “+ Create New HLO CAGE” button and following all associated steps:
3.2 Header View: The header page only displays the HLO(s) for a company and will contain up to four rows per HLO, one for each Confidence Level (Basic, Medium, High Virtual, and High On-site).
https://www.sprs.csd.disa.mil/pdf/SPRS_Access_Instructions.pdf https://www.sprs.csd.disa.mil/pdf/SPRS_Access_Instructions.pdf https://piee.eb.mil/piee-landing/ https://piee.eb.mil/piee-landing/
NIST SP 800-171 Quick Entry Guide SPRS 3.2.13
Version 3.2.13 DEC 2020 2
*Note: CAGE Hierarchy is imported from the System for Award Management (SAM).
Please contact your company’s CAGE hierarchy authority to have your data updated in the SAM. Updates typically flow to SPRS within 48 hours.
3.3 Details View: From the header page select the company name at the desired confidence level to view Assessment Details associated with the HLO hierarchy (see arrow above, section 3.2):
3.4 Assessments Entry: Each user with a PIEE “SPRS Cyber Vendor User” role may enter NIST SP 800-171 Assessments for their company. To enter an assessment, follow the steps below:
a. Select “+ Add New Assessment” button at Details View (see arrow above, section
3.3)
b. Enter Assessment Details and select “Save”:
3.5 Assessment Edit: After entering an assessment, it may be updated as necessary to reflect the company’s current status. To edit, select the pencil button within Details View as described in section 3.3:
File details come from the government source that posted it. Updated .