Your NIST SP 800-171 self-assessment and SPRS score, done in one week.
A fixed-fee gap assessment for small defense suppliers. You get your score, a System Security Plan, and a Plan of Action and Milestones for anything not yet in place.
You handle CUI on a DoD contract or subcontract.
If your contract carries DFARS 252.204-7012, you are required to implement NIST SP 800-171. To be considered for award you need a current self-assessment score posted in SPRS (DFARS 252.204-7019), and primes must confirm their subcontractors have one before they award (DFARS 252.204-7020).
Gap assessment
We walk through the NIST SP 800-171 requirements with your team and record what is in place and what is not.
SPRS score
Your score, calculated with the DoD Assessment Methodology and ready for you to enter in SPRS.
System Security Plan (SSP)
A written description of your system boundary and how each requirement is met.
Plan of Action and Milestones (POA&M)
Every gap, with what fixes it and a target date.
What I am not. I am not a C3PAO or a DoD assessor, and I cannot certify you. A gap assessment is a working review against the requirements. You post your own score in SPRS; my job is to make sure it is accurate and that the paperwork behind it holds up.
How it works
- Call or email. A short conversation to confirm the work fits your shop.
- Kickoff. We go through the requirements together.
- Within one week you have your score, SSP and POA&M.
- You post your score in SPRS.
The person you talk to is the person who does the work. No subcontractors, no account managers.
Get started
$3,500 fixed fee, one week. Call or email to get started.