@AriaImagined You do not comply with NIST-SP-800-171 , you implement the requirements. You are complying with DFARS 252.204-7012 by proving you have a

@AriaImagined You do not comply with NIST-SP-800-171 , you implement the requirements.

You are complying with DFARS 252.204-7012 by proving you have adequate security to meet the 110 requirements of NIST-SP-800-171 by having evidence all 320 objectives are met in your System Security Plan