As a DIB contractor navigating the extensive NIST 800-171 and CMMC requirements, it’s understandable to become overwhelmed by your contractual obligations and the breadth of what they entail. If your contracts contain the DFARS 7012, 7019 or 7020 clauses, act now and schedule a consultative call to learn more about how TSI can help get your organization closer to achieving compliance to NIST 800-171 by helping develop your readiness assessment, SSP, POAM and SPRS score.

CYBER_AB_REG-PRACT-200
CYBER_AB_PRO-200
CYBER-AB-LOGO-475X240
cissp-sq-192

How Does TSI Help DoD Contractors Like You?

We address all NIST 800-171 & CMMC 2.0 controls

We develop audit-ready compliance policies and documentation

TSI is C3PAO assessed & CMMC compliant ready

We guide you through the entire SPRS submission and CMMC 2.0
security program process

We minimize the costs and time to implement NIST 800-171 & CMMC
compliant environments, ensuring your good standing with the DoD

Department of the Army logo
United States Navy emblem
Army National Guard emblem
Seal_of_the_United_States_Coast_Guard
Seal_of_the_United_States_Department_of_the_Air_Force
Seal_of_the_United_States_Department_of_the_Navy
Department of Defense logo
sealMarine
Department of Defense logo
2
us-army
US-space-force-icon
DCMA-logo-136

Why TSI?

  • standards

    STANDARDS

    Provisional C3PAO CMMC Level 3 Assessed: We Practice what we preach.

  • solutions

    SOLUTIONS

    CISSP Led, On-Staff Security Compliance Team; complete IT Support & Cybersecurity.

  • expertise

    EXPERTISE

    Extensive military & government expertise; Top DoD Primes, U.S Army, Air Force & Navy

  • experience

    EXPERIENCE

    Industry Thought Leader and Partner to Over 100 SMBS Nation-wide.

fighter plane

DFARS 7012 requires compliance to NIST 800-171 | Contractors must report cybersecurity incidents to DoD within 72 hours | Cooperation with DoD investigators is required

DFARS 7019 & 7020 require a self-assessment and accurate reporting of your Supplier Performance Risk System (SPRS) score

Failing to meet these requirements may be considered a material breach of your contract terms, potentially leading to the loss of your current contract, ability to pursue future contracts or prosecution under the False Claims Act (FCA)

Determine your current compliance status with NIST 800-171:

  • Check with your Prime or Contracting Officer.
  • Review your RFI/RFPs and Section H of DoD Contracts (and other agencies).

Conduct NIST 800-171 Readiness Assessment.

Calculate and submit NIST score to SPRS.

Develop NIST 800-171 Report and Implementation Roadmap.

Begin formulating System Security Plan (SSP).

Generate Plan of Actions and Milestones (POAM).

Regularly maintain and update SSP.

NIST 800-171 & CMMC 2.0 cybersecurity risk assessment report including prioritized recommendations.

Updated and accurate SPRS score.

Plan of Action and Milestones (POAM).

Develop framework of System Security Plan (SSP).

NIST 800-171 & CMMC 2.0 Implementation Roadmap.

S ERVING SMALL BUSINESSES & THE DIB NATIONWIDE SINCE 1989

map-shadow-727x438

The Path to NIST 800-171 Compliance Begins Here

Find out how TSI can help your organization achieve NIST 800-171 compliance - connect with a TSI compliance expert for an introductory phone call to discuss your unique and specific needs. Call us at (508) 543-6979 or click the button below to get started.