NIST 800-171 & CMMC Assessment | DoD & Federal Contractor Compliance

Hi-Tex Solutions provides NIST 800-171 and CMMC compliance assessments for defense contractors, federal suppliers, and MSPs on AWS who need to understand and document their current cybersecurity posture.

NIST SP 800-171 defines 110 security requirements across 14 control families for protecting Controlled Unclassified Information (CUI). DoD contractors are required to self-attest compliance via an SSP and POA&M, and report their SPRS score. CMMC 2.0 builds on NIST 800-171, requiring third-party assessment for Level 2 and above. If your SSP is outdated or you've never calculated your SPRS score — you're exposed.

NIST 800-171 Gap Assessment Evaluation against all 110 controls across access control, audit and accountability, configuration management, identification & authentication, incident response, maintenance, media protection, personnel security, physical protection, risk assessment, security assessment, system & communications protection, and system & information integrity.

SPRS Score Calculation Your current Supplier Performance Risk System (SPRS) score — documented with methodology so you can defend it to a contracting officer.

System Security Plan (SSP) Accurate, current SSP reflecting your actual AWS control implementation — formatted to DoD expectations.

Plan of Action & Milestones (POA&M) Every gap documented with remediation action, owner, and target date in standard DoD POA&M format.

CMMC Level 1 & Level 2 Readiness Review Mapping of your current posture to CMMC practices and identification of what additional work is required before a C3PAO assessment.

Most NIST 800-171 assessments complete within 2–4 weeks. CMMC readiness reviews add 1–2 weeks. Contact us — we'll give you a firm timeline and quote within 3 business days.