NIST Quick Entry Guide.docx

DOCX document 4 MB Posted

Attached to
Karl Fischer Titrator - Combined Synopsis/Solicitation
Solicitation number
FA860125Q0121
Issued by

About this file

The document is a NIST SP 800-171 Quick Entry Guide for vendors to complete a Controlled Unclassified Information (CUI) assessment in the Supplier Performance Risk System (SPRS). The guide provides step-by-step instructions for accessing the PIEE (Procurement Integrated Enterprise Environment) system, navigating to the SPRS Cyber Reports module, and entering a NIST SP 800-171 assessment. Key requirements include obtaining a "SPRS Cyber Vendor User" role, completing an assessment methodology and system security plan, and entering assessment results with a confidence level (Basic, Medium, or High). Vendors must achieve a minimum score of 110 and provide a mitigation plan for any deficiencies.

The related federal contract opportunity is a Request for Quote (RFQ) issued by the Department of the Air Force Materiel Command for a Karl Fischer Titrator System. The solicitation (FA860125Q0121) seeks a commercial item using simplified acquisition procedures, with quotes due by 8 August 2025. The government will award a firm-fixed-price contract to the lowest-priced technically acceptable offer, contingent on fund availability. Vendors must be SAM-registered, complete the NIST SP 800-171 assessment, and submit a technical and price proposal with a detailed description of the equipment. Delivery is expected within 12 weeks after award, with FOB destination terms.

View the file

Other files

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

NIST SP 800-171

Quick Entry Guide

NIST SP 800-171 QUICK ENTRY GUIDE VERSION 4.0

NSLC PORTSMOUTH BLDG. 153-2 PORTSMOUTH NAVAL SHIPYARD, PORTSMOUTH, NH 03804-5000

Approved for public release, distribution is unlimited.

1. NIST SP 800-171 Assessment Database: The purpose of the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 is to protect Controlled Unclassified Information (CUI) in Nonfederal Systems and Organizations. This database contains data associated with NIST SP 800-171 Assessments.

2. PIEE Access: A “SPRS Cyber Vendor User” role is required to enter Basic Assessment information. Step-by-step PIEE Access Instructions can be found here. https://www.sprs.csd.disa.mil/access.htm

New Vendor (How to set up your company in PIEE) Help Page: https://piee.eb.mil/xhtml/unauth/web/homepage/vendorGettingStartedHelp.xhtml NIST SP 800-171 Quick Entry Guide SPRS Release V4.0

SPRS Vendor Access – New User w/PIEE account Instructions to add access or register within PIEE for the first time Version 4.0

MAY 2024

3. SPRS Application Access: To Access SPRS, follow the below steps:

a. PIEE landing page: https://piee.eb.mil/

b. Click “log-in” and follow prompted log-in steps

c. Screenshot Dtd 09 JAN 2024 Select the SPRS Icon:

Select the Cyber Reports module:

d.

3.1 Select the desired Hierarchy from the drop down and click the Run Cyber Reports button. The first CAGE displayed is the CAGE that is associated with the user’s PIEE profile. The CAGE in parenthesis is the hierarchy, the Highest Level Owner (HLO) reported to SPRS, that the PIEE profile CAGE is associated with.

NOTE: An asterisk * indicates the user has the SPRS Cyber Vendor User role (access to add/edit) for this CAGE/Hierarchy.

3.2 Navigate to the NIST SP 800-171 Assessments tab and select the Add New Assessment button.

NOTE: CAGE Hierarchy is imported from the System for Award Management (SAM). Contact your company’s Electric Business Point of Contact (EBPOC) listed at SAM.gov so they can correct the hierarchy in SAM. Updates typically flow to SPRS within 48 hours.

3.3 Enter Assessment Details: Enter data in the form and select “Save”:

NOTE: The Assessment Methodology and System Security Plan should be completed prior to entering assessment summary results within SPRS.

A DoD Unique Identifier (UID) is automatically assigned to each newly saved assessment. The DoDUID is a 10-digit alphanumeric number where the first two letters delineate the confidence level of the assessment; Basic, Medium, and High confidence levels start with SB, SM, SH respectively.

3.4 Assessment Edit/Delete: The user may update as necessary to reflect the company’s current status. To edit assessment details, click the pencil icon located within the Basic tab of the NIST SP 800-171 Assessments tab.

NOTE: The Basic Confidence Level is the only assessment that can be maintained (add/edit/delete) by vendors.

NOTE: Assessments results turn red when the assessment date expands beyond three years.

image3.png image4.png image5.png image6.png image7.png image8.jpeg image9.jpeg image10.emf

SPRS Vendor Access New User with a PIEE account.pdf

,-.,�/01234�566077��������809�:704�9;<=�>�-?@@�>663A1<� ,-.,�/@8BC.�5DD@,,����EC.�8@F�:,@.�G�������@H?,I?8J�-?@@�5DDC:8I�8,KD�-C.I,LC:IM�NKBJO�PQRGS�-C.I,LC:IM�85/5K�,M?-T5.BU�-C.I,LC:IMU�8M�VRWVXGQVVV

� !��"#$%&'�())#**�+&'�,#-�.*#'�-/01�2� 344�2))&5$0�6&�7&$/0&'�)&782$9�%202:�*)&'/$;:�2$%�)9<#'�/$+&'720/&$:�'#=5#*0�01#�>?@ABCDEB@CFGHAI@C�JKLMM@CB�N@OHPQ�'&R#�+&'�01#�� !��288R/)20/&$�/$� 344S��6&�#$0#'�&'�#%/0�)9<#'�/$+&'720/&$�T,3�6�� �UVVWXYX�2**#**7#$0�'#*5R0*Z�01#�>K[NK�?\]HC�GHAI@C�̂_HCQ�'&R#�/*�'#=5/'#%S��$̀)#�*5<7/00#%:�01#�'#=5#*0�/*�'#a/#-#%�2$%�288'&a#%�<9�01#�b&$0'2)0&'�())&5$0�(%7/$/*0'20&'�Tb(cZ�2**&)/20#%�-/01�01#�b&77#')/2R�2$%�d&a#'$7#$0�4$0/09�Tb(d4ZS�e f&;�/$�0&� 344e bR/)g�hc9�())&5$0i�/$�01#�1#2%#'�01#$�bR/)g�h(%%�(%%/0/&$2R�!&R#*i KECHHA_j@B�ELCCHAB�D_�@k�lm�n?o�pqpr�e s&RR&-�01#�8'&780*�0&�a#'/+9�.*#'�8'&+/R#�2$%��58#'a/*&'t(;#$)9�3$+&'720/&$e �#R#)0�h� !��u��588R/#'� #'+&'72$)#�!/*g��9*0#7i�+'&7�(88R/)20/&$�R/*0e �#R#)0�&$#�&'�<&01�'&R#*�+'&7�.*#'�!&R#*�R/*0e bR/)g�h(%%�!&R#*i

KECHHA_j@B�ELCCHAB�D_�@k�lm�n?o�pqpr�

� !"#$�%&'()"*'!�+',#�-�+./ 0 1234456789�2:33459�;6�8<�=>�?@A�BCBD�EFGHI� J#KL#M"�)((#MM�"'�NLO"*PO#�+./ M�QR�$#P#)"*!S�"T#�J'O#�M"#PM�U'$�#)(T�+./ V��WU�$#KL#M"*!S�"T#�(RQ#$�$'O#X�)((#MM�"'�'!#�'U�"T#�+./ M�*!�)�+./ �T*#$)$(TR�P$'Y*,#M�)((#MM�"'�)OOV��+./ �T*#$)$(TR�*M�*,#!"*U*#,�QR�"T#�ZRM"#N�U'$�.[)$,�\)!)S#N#!"�]Z.\̂�Q)M#,�'!�#!"*"R�$#S*M"$)"*'!�,)")V��� _'OO'[�"T#�P$'NP"M�"'�('NPO#"#�J#S*M"$)"*'!�M"#PM�̀�a�bc�dLM"*U*()"*'!X�ZLNN)$RX�)!,�.S$##N#!"V.((#MM�"'�ZeJZ�$#KL*$#M�+.\�)("*Y)"*'!V�� fgh839;59i��f<�97434�j6�85kl�854�@mn�o46jp5;94o�<83�;�@mqr�;5o�97;9�@mn�j6�34s:469j5p�;22466c�('!")("�"T#�eW �t#OP�u#MvX�,*M)VSO'Q)OVM#$Y*(#,#MvVNQwV#Qa"*(v#"a$#KL#M"MxN)*OVN*OX�"'�$#KL#M"�)("*Y)"*'!V image11.png image12.jpeg image13.png image14.png image15.jpeg image16.png image17.emf

SPRS Vendor Cyber Reports Access.pdf

����������������������������������� �� ����� ���� ������+,-.���/0+���+�.�1�����+����������+2+��+��������,�2���.�1�3.415�02-6��789:;��.�1�3.415�,���2��5<�/��-=��.�1�3.415=�,5��9>��:8��� �� ������

+,*��*���
�+
�-����0�.��1���.����
/)�����)�,����),�2������

)�)���3

)����3���4+)�)�)�2
�����������)���)����5������+��

-)����6��*�� �4+����)�� �/)�7����������

/���
���*�����
�0��81�����)�����7)�*��*���--�
�)�������9/�

�-�������)���0��9�1������:;<=;�>?@AB�CADEFB�GHABI�

�4+) ���� �/)�76����� 6���)�6� �)�3

-��)��0J.�K����L��2�M�������88�1��K*)��
����
/)�����

)/)��,����������3 �������9�0�1�7)�*)���*��� -�����*)�

�*������:>FDNBOPNFBQCADEFB�R;STTFBN�=FUAVI�

�4+) ���3 �/)�72 ���� 3�� -������� �)�3

-��)������-�)�
��-����������������

)������ ����3������+ )�����W��XYZ!%Z$[�\]XX�̂! &!(��� _̀ abc��def�ghii�jkelk�kmno�pq�respnqt�uv� ���� ���w ,�)��� ��.��� ��xyz{|�}~���{{������z������������������xyz{|�}�������z�z���y���y����

�������3����������������7��*���
-������/�

)3����� 3)��������+�� ��,�����.�3 -��) �������y�{��}�����������yz������������{���z�|�����������������yz{��z���yz������������� ���

�*�
����3
-����
�������)���3��xyz{|�}������y������

������� 3����������

����-��.����������/0123���4,����-��������5,6�7�6����8���
��5�-�7���

���-�7����+����������.

��-�+���8����9+����

6���
;7�����
7;76�����-��������-66���8���<7�+7���+���5�-���+7�

�+������8��+7� �+��7��7����7.7��� ���+�������5�.

��=-�-��5����>��=?� -���� �����7��� ��7��

-�7���-�-���� +��@66<��+���
5�������5�6�������7��
-�7����������A�BC�D,��7.7�-�7�E��,55-

�E�-����� ��5�������F��������7���

-�����,���-��7;-�7��
���+���5�-�����=��� GHIJKLMNLO��GP�LQRKR�ST�JNUV�JNR�WXY�ZRTS[NMLRZ�PJK�M�WX\]�MNZ�LQML�WXY�ST�KR̂_RTLSN[�M̀ R̀TTC����-����a��E��7�-��6

-6��� ;7�����b�5 c�� A�7�b��A

�4,����d5-76�576���
�4,����-��7;-�7����ef�gRh�iG]]�jTRKTC��-��8����a���k�%l$"m��n�o�:���*�

��%l$"m��p���q�r�s��&!��t�u#�$v#�$!��w�)���$�u�x�#���&�y�lz*������.�� �;7�<7���-���� 5�6��7����+��� �6757�- �������E�%l$"m��{�u$|���*���

������� ����������������� !�"#��$%&' ()�*" "�+�,"� ,!�-.&(/�012%��3������45�6�78�%�")9�:�0;�,!<%3�

������� ��=�����������������4�����������5���5 ��>��� ���?@�-<+9.�"��0A8�%�$%<B&.�3� ,!�0*79�%'&8<%�C�12�,()3�&,B<%+��5 �����*�.�("�0*$�*�D�����45� >������5�6�*)8"�+3�B%<+�199.&( "&<,�.&8"�5����4���� ���

���
4����
>�E��
��4���45���F��-.&(/�01!!��<.�83�������
��������������������������
������������!���"�#��

�0��

-���
1 �����
1 -�.�������������--���"���2 �� �������,������ �

��2� ��3���.�,����4��35�

������������ -��6--2������
,�������,�-������. ��
����������789:�;��� � ����<���,,�

������2���� �����3���� 1�� ���� ?@ABCDEFDG��?H�DIJCJ�KL�BFMN�BFJ�OPQ�RJLKSFEDJR�HBC�E�OPTU�EFR�DIED�OPQ�KL�CJVWJLDKFS�EXXJLL:�� �������>��<�� ���.- 1 �������, Y�� 8� ����8

�+�����Z,� -�, -���
�+�������� 1������

image18.png image19.png image20.png image21.png image22.png image23.png image24.png image25.png image1.png image2.png

File details come from the government source that posted it. Updated .