NIST 800-171 Compliance Self-Assessment Questionnaire
Evaluate your organization's adherence to NIST 800-171 controls with this concise self-assessment questionnaire.
Organization Name
*
Assessment Date
*
 -
Month
 -
Day
Year
2 digit month, 2 digit day, 4 digit year
Date
How would you rate your organization's overall familiarity with NIST 800-171 requirements?
*
1
2
3
4
5
Has your organization formally documented policies and procedures for compliance?
*
Yes
In Progress
No
Access Control: How strictly are user access privileges managed and reviewed?
*
Not at all
1
2
3
4
Fully managed and reviewed
5
1 is Not at all, 5 is Fully managed and reviewed
Incident Response: How prepared is your organization to detect and respond to cybersecurity incidents?
*
Not prepared
1
2
3
4
Fully prepared
5
1 is Not prepared, 5 is Fully prepared
Risk Assessment: How frequently does your organization assess cybersecurity risks?
*
At least annually
Every 2-3 years
Rarely or never
Please indicate your current status for the following NIST 800-171 control families:
*
Rows
Not Implemented
Partially Implemented
Fully Implemented
Access Control
1
2
3
Awareness & Training
4
5
6
Audit & Accountability
7
8
9
Configuration Management
10
11
12
Identification & Authentication
13
14
15
Incident Response
16
17
18
What is your organization's biggest challenge in achieving NIST 800-171 compliance?
Would you like to be contacted for further guidance or support?
Yes
No
Submit Assessment
Should be Empty: