Federal Contracting Acronym
NIST
National Institute of Standards and Technology
Plain-English definition
The National Institute of Standards and Technology (NIST) publishes voluntary standards and guidelines that federal contracts incorporate by reference. NIST Special Publication 800-171 defines security requirements for protecting Controlled Unclassified Information (CUI) in nonfederal systems—commonly flowed through DFARS clause 252.204-7012 and assessed via SPRS and CMMC programs. NIST is distinct from FedRAMP, which focuses on cloud service authorization for agency use.
Why it matters
Offerors and subcontractors must trace SSPs, assessments, and proposal security claims to the NIST baseline cited in the solicitation.
Where you will see it
DFARS cyber clauses, CMMC and RMF artifacts, agency security appendices, and supplier performance risk reviews.
Example in context
A cybersecurity lead maps each Section H CUI requirement to NIST SP 800-171 controls and records implementation status before the prime submits SPRS evidence.