NIST SP 800-171 DoD Assessment Requirements_DE ARNG Quick Reference Guide_2024-04-24.docx

Special Publication DOCX document 20 KB Posted

Attached to
Occupational Health Medical Exam Services, Onsite, Delaware Army National Guard
Solicitation number
W912L5-24-Q-0001
Issued by

About this file

This document is a Quick Reference Guide for the Delaware National Guard - U.S. Property & Fiscal Office (USPFO - DE) regarding the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 DoD Cybersecurity Assessment Requirements. It outlines the requirement for contractors to complete a cybersecurity assessment every three years and report the summary score and assessment date via the Department of Defense Supplier Performance Risk System (SPRS) prior to award of any contract involving controlled information. The guide provides links to the DoD Assessment Methodology, NIST SP 800-171 assessment questions, and relevant FAR and DFARS clauses. It also suggests contacting an APEX Accelerator (Procurement Technical Assistance Center) for further assistance.

The related federal contract opportunity is a solicitation (W912L5-24-Q-0001) for Occupational Health Medical Exam Services at up to four Delaware Army National Guard facilities. The solicitation requires a NIST SP 800-171 cybersecurity assessment in accordance with DFARS 252.204-7019. Proposals must include fill-ins, representations, and technical information as specified in the provisions 52.212-1, 52.212-2, and 52.212-3.

View the file

Other versions and copies of NIST SP 800-171

File Revision Posted Attached to
ATT 25_NIST SP 800-171 Rev 3.pdf Rev. 3 Andromeda Draft RFP
Attachment 7 - SPRS_Access_NISTSP800-171.pdf Revision not stated PKAB Maintain Missile Alert Fields (MAFs) Septic Tanks and Grease Traps (Services) AMENDMENT 03
Attachment 7a - NIST SP 800-171 Assessment.pdf Revision not stated PKAB Maintain Missile Alert Fields (MAFs) Septic Tanks and Grease Traps (Services) AMENDMENT 03
Attachment 7b - NIST SP 800-171 Entry Guide.pdf Revision not stated PKAB Maintain Missile Alert Fields (MAFs) Septic Tanks and Grease Traps (Services) AMENDMENT 03
Atch 2a NIST SP 800-171 Assessment.pdf Revision not stated Combined Synopsis/Solicitation: Test and Replace Fire Suppression Sprinkler Heads at FE Warren AFB, WY (Service) AMENDMENT 02
Atch 2b NIST SP 800-171 Entry Guide.pdf Revision not stated Combined Synopsis/Solicitation: Test and Replace Fire Suppression Sprinkler Heads at FE Warren AFB, WY (Service) AMENDMENT 02
Atch 2 SPRS_Access_NISTSP800-171.pdf Revision not stated Combined Synopsis/Solicitation: Test and Replace Fire Suppression Sprinkler Heads at FE Warren AFB, WY (Service) AMENDMENT 02
Attachment 9 - NIST SP 800-171 Entry Guide.pdf Revision not stated Design and Build Covered Parking Structure for Fighter Aircraft
Attachment 8 - NIST SP 800-171 Assessment.pdf Revision not stated Design and Build Covered Parking Structure for Fighter Aircraft
Atch 3b NIST SP 800-171 Assessment.pdf Revision not stated Removal of Underground Storage Tank at Launch Facility E-10 (Laramie County, WY)
Atch 3c NIST SP 800-171 Entry Guide.pdf Revision not stated Removal of Underground Storage Tank at Launch Facility E-10 (Laramie County, WY)
Atch 2a NIST SP 800-171 Assessment.pdf Revision not stated Amendment 03: Replace Underground Storage Tank (UST) at Launch Facility (LF) D-02 (Banner County, NE)
Atch 2b NIST SP 800-171 Entry Guide.pdf Revision not stated Amendment 03: Replace Underground Storage Tank (UST) at Launch Facility (LF) D-02 (Banner County, NE)
Atch 3a NIST SP 800-171 Assessment.pdf Revision not stated AMENDMENT 02: Replace Site Lighting Electrical Conduits at 5 LFs
Atch 3b NIST SP 800-171 Entry Guide.pdf Revision not stated AMENDMENT 02: Replace Site Lighting Electrical Conduits at 5 LFs
ATTACH_11_For Contractors - NIST SP 800-171 and SPRS.pdf Revision not stated Integrated Solid Waste Management Bulk Waste at Marine Corps Installations Pacific (MCI-PAC) Camp Smedley D. Butler, Okinawa Japan
Attachment 2b NIST SP 800-171 Assessment.pdf Revision not stated Decommission Missile Alert Field (MAF) R-01 Radio Tower and Generator AMENDMENT 01
Attachment 2c NIST SP 800-171 Entry Guide.pdf Revision not stated Decommission Missile Alert Field (MAF) R-01 Radio Tower and Generator AMENDMENT 01
ATTACH_17_For_Contractors-NIST_SP_800-171_and_SPRS.pdf Revision not stated Integrated Solid Waste Management South at Marine Corps Installations Pacific (MCI-PAC) Camp Smedley D. Butler, Okinawa, Japan
ATTACHMENT 6_252-204-7019-Notice-of-NISTSP-800-171-DoD-Assessment-Requirements-.pdf Revision not stated FOREIGN MILITARY SALES (FMS) TECHNICAL ORDER (TO) & COMPUTER PROGRAM IDENTIFICATION NUMBER (CPIN) WORLDWIDE REVIEW (WWR)
Show all 20

Who attaches NIST SP 800-171

Other files

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Quick Reference Guide Delaware National Guard – U.S. Property & Fiscal Office (USPFO – DE) National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 DoD Cybersecurity Assessment Requirements

To be considered for award for any contract opportunity involving controlled information, you must complete a cybersecurity assessment every three years in accordance with National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 Rev2. You must report your summary score and date of assessment via the Department of Defense Supplier Performance Risk System (SPRS) in the Procurement Integrated Enterprise Environment (https://piee.eb.mil/).

DoD reporting guidance for NIST SP 800-171 is at https://www.sprs.csd.disa.mil/nistsp.htm DoD Assessment Methodology and Scoring Template (Annex A (page 12)) is available at https://www.acq.osd.mil/asda/dpc/cp/cyber/docs/safeguarding/NIST-SP-800-171-Assessment-Methodology-Version-1.2.1-6.24.2020.pdf [Parent site: https://www.acq.osd.mil/asda/dpc/cp/cyber/] NIST SP 800-171 assessment questions can be found at https://csrc.nist.gov/pubs/sp/800/171/r2/upd1/final … on right side of screen, we suggest Supplemental Material: Security Requirements Spreadsheet.

The following cybersecurity provisions and clauses are in most contracts with the DoD:

· FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems

· DFARS 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting

· DFARS 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements

· DFARS 252.204-7020 NIST SP 800-171 DoD Assessment Requirements The full text of these provisions or clauses may be accessed at these addresses:

· FARhttps://www.acquisition.gov/
· DFARShttps://www.acq.osd.mil/dpap/dars/dfarspgi/current/index.html

You might contact an APEX Accelerator, formerly known as Procurement Technical Assistance Centers, an official government contracting resource for small businesses, for further assistance, at https://www.apexaccelerators.us/ or https://www.aptac-us.org/ Further assistance regarding cybersecurity can be found at:

· https://csrc.nist.gov/projects/protecting-controlled-unclassified-information

· https://dodcio.defense.gov/CMMC/

· https://projectspectrum.io/

· https://public.cyber.mil/

· https://www.safcn.af.mil/CISO/Small-Business-Cybersecurity-Information/ Thank you for your continued participation in DoD and National Guard contract opportunities. You are obliged to report your cybersecurity self-assessment prior to award of your next contract involving controlled unclassified information.

v2024-04-24

File details come from the government source that posted it. Updated .