--- title: The Definitive Guide to NIST Compliance description: Get answers to your questions about NIST 800-171 and how to achieve NIST compliance in the free guide, 'The Definitive Guide to NIST 800-171 Compliance.' image: https://blog.corserva.com/hubfs/nist-guide-blog-400x200.jpg --- ![NIST compliance](https://blog.corserva.com/hs-fs/hubfs/nist-guide-blog-400x200.jpg?width=300&name=nist-guide-blog-400x200.jpg) [Lisa DeVoto](https://blog.corserva.com/author/lisa-devoto)March 6, 20181 min read # The Definitive Guide to NIST Compliance [Previous ](https://blog.corserva.com/20-ways-to-improve-your-security-posture) [Next ](https://blog.corserva.com/outsourced-it) Companies that are working with the government (either directly or indirectly further down the federal supply chain) should be compliant with the [latest NIST 800-171 mandate](http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171r2.pdf) as of December 31, 2017. If you are a defense or government supplier – or if you are a subcontractor selling to a government supplier – you have probably heard about the NIST 800-171 mandate. You may also be familiar with NIST 800-53 and wondered what's the difference between these two mandates.   ## Get Answers to Your Questions About NIST 800-171 Typical questions about NIST 800-171 compliance you may have include: - What is NIST? - Why have I only heard of NIST **recently**? - **Who** needs to comply? - Is it only manufacturers that need to comply? - How does **CMMC** impact my NIST compliance? - Will I be notified? - How much will NIST 800-171 compliance **cost**? - **Can we do it ourselves?** - What **evidence** do I need to provide to show compliance? - I thought the deadline was delayed? - Maybe I'm already compliant? - What if I don't comply? - What if I've **missed the deadline**? - **What happens next** after becoming compliant? For answers to these and other questions that you may have about NIST compliance, check out Corserva's [guide to NIST compliance & CMMC](https://info.corserva.com/nist-compliance-the-definitive-guide).   [![NIST and CMMC](https://no-cache.hubspot.com/cta/default/3788695/2996c11d-d1a1-45cb-ae41-0d1f63f77b7b.png)](https://cta-redirect.hubspot.com/cta/redirect/3788695/2996c11d-d1a1-45cb-ae41-0d1f63f77b7b)   CMMC (and CMMC 2.0) The Cybersecurity Maturity Model Certification (CMMC) is a unified cybersecurity standard created to increase the security posture of companies operating in government supply chains. The Department of Defense is gradually transitioning from the NIST 800-171 mandate to the CMMC framework. By October 1, 2025, all new DoD contracts will require compliance with CMMC.   ![cmmc-levels](https://blog.corserva.com/hs-fs/hubfs/cmmc-levels.png?width=600&name=cmmc-levels.png)   ![RPO](https://blog.corserva.com/hs-fs/hubfs/RPO.png?width=200&name=RPO.png)About Corserva Corserva has been in business for over 30 years and offers a large portfolio of IT and consulting services. Our team has a very strong focus on [NIST 800-171 assessments and CMMC readiness services](https://www.corserva.com/cmmc-readiness/). Corserva is a CMMC-AB Registered Provider Organization™ (RPO) and we are [listed on the CMMC-AB Marketplace](https://portal.cmmcab.org/marketplace/corserva-inc/). Request a quote today to get started on your path to compliance. [![GET A QUOTE](https://no-cache.hubspot.com/cta/default/3788695/d54a8a5a-5afe-4bc4-a2a0-eff5da821ca0.png)](https://cta-redirect.hubspot.com/cta/redirect/3788695/d54a8a5a-5afe-4bc4-a2a0-eff5da821ca0)   ![avatar](https://blog.corserva.com/hs-fs/hubfs/lisa-devoto.jpg?width=290&name=lisa-devoto.jpg) #### [Lisa DeVoto](https://blog.corserva.com/author/lisa-devoto) Lisa has 25+ years of experience working for technology companies in B2B marketing and technical communications. She is driven to help people solve problems through educational content. Lisa has an MBA from University of Connecticut and a BS in Computer Science from Rensselaer Polytechnic Institute. ## RELATED ARTICLES ```json { "@context" : "https://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "United States", "addressLocality" : "Trumbull", "addressRegion" : "CT", "postalCode" : "06611", "streetAddress" : "100 Technology Drive" }, "email" : "hello@corserva.com", "knowsLanguage" : "en-us", "logo" : { "@type" : "ImageObject", "url" : "https://cdn2.hubspot.net/hubfs/3788695/corserva-logo.png" }, "name" : "Corserva", "telephone" : "+1 203 452 8500", "url" : "https://blog.corserva.com/the-definitive-guide-to-nist-compliance" } ``` ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "abstract" : "Get answers to your questions about NIST 800-171 and how to achieve NIST compliance in the free guide, 'The Definitive Guide to NIST 800-171 Compliance.'", "author" : { "@type" : "Person", "name" : "Lisa DeVoto" }, "dateModified" : "December 15, 2021 7 PM", "datePublished" : "March 6, 2018 7 PM", "headline" : "The Definitive Guide to NIST Compliance", "image" : "https://info.corserva.com/hubfs/nist-guide-blog-400x200.jpg", "inLanguage" : "en-us", "keywords" : "[NIST & CMMC]", "mainEntityOfPage" : { "@type" : "WebPage" }, "name" : "The Definitive Guide to NIST Compliance", "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://cdn2.hubspot.net/hubfs/3788695/corserva-logo.png" }, "name" : "Corserva" }, "text" : "Companies that are working with the government (either directly or indirectly further down the federal supply chain) should be compliant with the latest NIST 800-171 mandate as of December 31, 2017. If you are a defense or government supplier – or if you are a subcontractor selling to a government supplier – you have probably heard about the NIST 800-171 mandate. You may also be familiar with NIST 800-53 and wondered what's the difference between these two mandates. Get Answers to Your Questions About NIST 800-171 Typical questions about NIST 800-171 compliance you may have include: What is NIST? Why have I only heard of NIST recently? Who needs to comply? Is it only manufacturers that need to comply? How does CMMC impact my NIST compliance? Will I be notified? How much will NIST 800-171 compliance cost? Can we do it ourselves? What evidence do I need to provide to show compliance? I thought the deadline was delayed? Maybe I'm already compliant? What if I don't comply? What if I've missed the deadline? What happens next after becoming compliant? For answers to these and other questions that you may have about NIST compliance, check out Corserva's guide to NIST compliance & CMMC. CMMC (and CMMC 2.0) The Cybersecurity Maturity Model Certification (CMMC) is a unified cybersecurity standard created to increase the security posture of companies operating in government supply chains. The Department of Defense is gradually transitioning from the NIST 800-171 mandate to the CMMC framework. By October 1, 2025, all new DoD contracts will require compliance with CMMC. About Corserva Corserva has been in business for over 30 years and offers a large portfolio of IT and consulting services. Our team has a very strong focus on NIST 800-171 assessments and CMMC readiness services. Corserva is a CMMC-AB Registered Provider Organization™ (RPO) and we are listed on the CMMC-AB Marketplace. Request a quote today to get started on your path to compliance.", "url" : "https://blog.corserva.com/the-definitive-guide-to-nist-compliance", "wordCount" : "662" } ``` ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Lisa DeVoto", "url" : "https://blog.corserva.com/author/lisa-devoto" }, "dateModified" : "2021-12-15T19:28:43.920Z", "datePublished" : "2018-03-06T19:04:41.000Z", "headline" : "The Definitive Guide to NIST Compliance", "image" : [ "https://blog.corserva.com/hubfs/nist-guide-blog-400x200.jpg" ], "mainEntityOfPage" : { "@id" : "https://blog.corserva.com/the-definitive-guide-to-nist-compliance", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.corserva.com/hubfs/corserva-logo.png" }, "name" : "Corserva" } } ``` ```json { "@context" : "http://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "United States", "addressLocality" : "Trumbull", "addressRegion" : "CT", "postalCode" : "06611", "streetAddress" : "100 Technology Drive " }, "alternateName" : "Corserva", "areaServed" : { "@type" : "GeoCircle", "geoMidpoint" : { "@type" : "GeoCoordinates", "latitude" : "41.296953", "longitude" : "-73.229171" }, "geoRadius" : "150 km" }, "description" : "IT Managed Services", "email" : "sales@corserva.com", "image" : "https://info.corserva.com/hubfs/corserva-logo.png", "logo" : "https://cdn2.hubspot.net/hubfs/3788695/corserva-logo.png", "mainEntityOfPage" : { "@id" : "https://blog.corserva.com/the-definitive-guide-to-nist-compliance", "@type" : "WebPage", "description" : "Get answers to your questions about NIST 800-171 and how to achieve NIST compliance in the free guide, 'The Definitive Guide to NIST 800-171 Compliance.'" }, "naics" : "423430", "name" : "Corserva", "sameAs" : [ "https://www.facebook.com/corserva/", "https://twitter.com/Corserva", "https://www.linkedin.com/company/corserva/", "https://www.youtube.com/channel/UCahxftAl1XZ_ZJNZzS8VINQ", "https://plus.google.com/b/107801827072544428319/+Corserva" ], "telephone" : "8553303976", "url" : "https://www.corserva.com" } ```