Home / Glossary / NIST SP 800-171A
NIST SP 800-171A
Also known as: NIST 800-171A · 800-171A
The NIST publication defining the assessment objectives and procedures for evaluating the 110 requirements in NIST SP 800-171. The assessor's playbook.
NIST Special Publication 800-171A is the companion assessment guide to NIST SP 800-171. While 800-171 defines what must be done, 800-171A defines how to evaluate whether it has been done.
For each of the 110 security requirements in 800-171, NIST SP 800-171A breaks the requirement into one or more discrete assessment objectives — specific, testable determination statements that an assessor uses to render a met / not met / not applicable verdict. There are roughly 320 assessment objectives across the 110 requirements.
Every C3PAO assessment is conducted against the 800-171A assessment objectives. Evidence collected by the contractor must map to specific objectives, not just to the parent requirements, for the assessment to proceed efficiently.
Stop Googling. Start working.
CMMCDocs has all 110 NIST SP 800-171 Rev 2 requirements built in — with the language, the templates, and the evidence vault you need. Spin up a free demo workspace and click around the way an assessor would.
Get my demo account
CMMCDocs.com