NIST SP 800-171 DoD Assessment Requirements_DE ARNG Quick Reference Guide_2024-04-24.docx
Special Publication DOCX document 20 KB Posted
- Solicitation number
- W912L5-24-Q-0001
- Issued by
-
Department of the Army National Guard
About this file
This document is a Quick Reference Guide for the Delaware National Guard - U.S. Property & Fiscal Office (USPFO - DE) regarding the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 DoD Cybersecurity Assessment Requirements. It outlines the requirement for contractors to complete a cybersecurity assessment every three years and report the summary score and assessment date via the Department of Defense Supplier Performance Risk System (SPRS) prior to award of any contract involving controlled information. The guide provides links to the DoD Assessment Methodology, NIST SP 800-171 assessment questions, and relevant FAR and DFARS clauses. It also suggests contacting an APEX Accelerator (Procurement Technical Assistance Center) for further assistance.
The related federal contract opportunity is a solicitation (W912L5-24-Q-0001) for Occupational Health Medical Exam Services at up to four Delaware Army National Guard facilities. The solicitation requires a NIST SP 800-171 cybersecurity assessment in accordance with DFARS 252.204-7019. Proposals must include fill-ins, representations, and technical information as specified in the provisions 52.212-1, 52.212-2, and 52.212-3.
View the file
Other versions and copies of NIST SP 800-171
Show all 20
Who attaches NIST SP 800-171
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Quick Reference Guide Delaware National Guard – U.S. Property & Fiscal Office (USPFO – DE) National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 DoD Cybersecurity Assessment Requirements
To be considered for award for any contract opportunity involving controlled information, you must complete a cybersecurity assessment every three years in accordance with National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 Rev2. You must report your summary score and date of assessment via the Department of Defense Supplier Performance Risk System (SPRS) in the Procurement Integrated Enterprise Environment (https://piee.eb.mil/).
DoD reporting guidance for NIST SP 800-171 is at https://www.sprs.csd.disa.mil/nistsp.htm DoD Assessment Methodology and Scoring Template (Annex A (page 12)) is available at https://www.acq.osd.mil/asda/dpc/cp/cyber/docs/safeguarding/NIST-SP-800-171-Assessment-Methodology-Version-1.2.1-6.24.2020.pdf [Parent site: https://www.acq.osd.mil/asda/dpc/cp/cyber/] NIST SP 800-171 assessment questions can be found at https://csrc.nist.gov/pubs/sp/800/171/r2/upd1/final … on right side of screen, we suggest Supplemental Material: Security Requirements Spreadsheet.
The following cybersecurity provisions and clauses are in most contracts with the DoD:
· FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems
· DFARS 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting
· DFARS 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements
· DFARS 252.204-7020 NIST SP 800-171 DoD Assessment Requirements The full text of these provisions or clauses may be accessed at these addresses:
| · FAR | https://www.acquisition.gov/ |
| · DFARS | https://www.acq.osd.mil/dpap/dars/dfarspgi/current/index.html |
You might contact an APEX Accelerator, formerly known as Procurement Technical Assistance Centers, an official government contracting resource for small businesses, for further assistance, at https://www.apexaccelerators.us/ or https://www.aptac-us.org/ Further assistance regarding cybersecurity can be found at:
· https://csrc.nist.gov/projects/protecting-controlled-unclassified-information
· https://dodcio.defense.gov/CMMC/
· https://projectspectrum.io/
· https://public.cyber.mil/
· https://www.safcn.af.mil/CISO/Small-Business-Cybersecurity-Information/ Thank you for your continued participation in DoD and National Guard contract opportunities. You are obliged to report your cybersecurity self-assessment prior to award of your next contract involving controlled unclassified information.
v2024-04-24
File details come from the government source that posted it. Updated .