Get a Competitive Advantage in the JCP by Achieving NIST 800-171 Compliance + Increasing your SPRS Score

The Joint Certification Program (JCP) is designed to allow US and Canadian contractors to apply for access to unclassified export controlled data belonging to either the U.S. Department of Defense (DoD) or Canadian Department of National Defence (DND). It provides streamlined access to unclassified, export-controlled military technical data critical to national defense. However, updates to the program have introduced a crucial requirement for JCP applicants: documenting a NIST 800-171 assessment and calculating a Supplier Performance Risk System (SPRS) score.

This guide explains the Joint Certification Program, details the NIST 800-171 requirement, and highlights how PreVeil can support defense contractors in navigating these changes efficiently.

What is the Joint Certification Program (JCP)?

Established in 1985, the Joint Certification Program (JCP) facilitates secure information sharing between the U.S. and Canada. JCP certification grants eligible companies access to unclassified, export-controlled technical data, such as:

  • Blueprints
  • Software
  • Operating instructions
  • Other critical technical information

This data is vital for national defense and ensures contractors are equipped to support military operations securely.

In order to obtain JCP Certification, businesses must:

What is NIST 800-171?

NIST Special Publication (SP) 800-171 provides a framework for protecting Controlled Unclassified Information (CUI). CUI encompasses sensitive government information that is not classified, but still requires safeguarding.

JCP Renewals and the NIST 800-171 Requirement

Many JCP certifications are approaching their five-year renewal period. Companies renewing their JCP certification for the first time since the NIST requirement came into effect will need to ensure their NIST assessment is documented in the SPRS. Failure to do so will result in a denial of their JCP application.

How PreVeil Simplifies JCP, NIST 800-17, and CMMC Compliance

PreVeil is a proven solution trusted by over 1500 defense contractors to help comply with JCP, NIST 800-171, and the Cybersecurity Maturity Model Certification (CMMC) framework. Here’s how PreVeil helps:

  1. Comprehensive NIST 800-171 Support: PreVeil’s File Sharing and Email platform enables contractors to protect CUI with end-to-end encryption & supports 102 out of 110 NIST 800-171 controls.
  2. Boost your SPRS score: PreVeil helped enabled Virginia Tech’s Applied Research Corp. to increase their SPRS score by 80 points.
  3. Pre-filled Documentation: Save time with pre-filled documents that include all 110 NIST 800-171 controls, including SOPs, SSP, and more.
  4. Futureproof Compliance: PreVeil is recognized by the DoD as being FedRAMP Moderate Baseline Equivalent and supporting DFARS 7012 (c-g) and using FIPS 140-2 validated encryption module to protect CUI. This enables defense contractors to meet CMMC and ITAR compliance with this same system.
  5. Personalized Support: PreVeil provides 1×1 support through your entire compliance journey – from prep to assessment through our network of consultants and auditors.

Achieve NIST 800-171 Compliance Today

The new NIST 800-171 requirement for JCP applications doesn’t have to be a roadblock. PreVeil simplifies compliance, helping contractors save over 60% compared to GCC High while securing sensitive data effectively.

Take control of your JCP certification and ensure compliance with ease. Contact PreVeil today to learn how we can help.