Means Engineering, Inc.

Product development engineering in medical, industrial, semiconductor equipment & military with a standard of excellence in form, function and design.

(760) 931-9452 | info@meanseng.com
5927 Geiger Court, Carlsbad, CA 92008-7305

  • Home
  • About Us
    • Our Values
    • Careers
    • Employee Testimonials
    • CMMC Level 3
  • Services
    • Design Engineering
    • Printed Circuit Board
    • Precision Machining
    • High Purity Welding
    • Clean Room Assembly
    • Complex Box Builds
    • Quality Management
  • Featured Works
  • Recent News
  • Resources
    • General Resources
    • Customer Resources
    • Supplier Resources
  • Contact Us
Cybersecurity  ·  NIST SP 800-171  ·  CMMC 2.0

NIST SP 800-171 Compliant Contract Manufacturer

Means Engineering implements and maintains all 110 security controls of NIST SP 800-171 Rev. 2  the foundation of CMMC 2.0 Level 2 (Advanced)  to protect Controlled Unclassified Information (CUI) across our manufacturing operations. Our implementation carries a perfect score of 110 in the Supplier Performance Risk System (SPRS) and is affirmed annually.

SPRS Score 110 / 110
All 110 NIST SP 800-171 Controls
DFARS 252.204-7012 Compliant

Standards & Regulations We Follow

Our cybersecurity posture is built on NIST SP 800-171 Rev. 2 and the DFARS clauses flowed down through our Department of Defense contracts.

NIST SP 800-171 Rev. 2
All 110 controls implemented to protect Controlled Unclassified Information (CUI) in nonfederal systems · SPRS score of 110

CMMC 2.0 Level 2 — Advanced
Maps directly to the 110 NIST SP 800-171 controls — the required tier for contractors handling CUI

FAR 52.204-21
Basic safeguarding of Federal Contract Information (FCI) — the CMMC 2.0 Level 1 foundation

DFARS Clauses We Comply With
252.204-7008
Compliance with Safeguarding Covered Defense Information Controls

252.204-7012
Safeguarding Covered Defense Information & Cyber Incident Reporting

252.204-7019
Notice of NIST SP 800-171 DoD Assessment Requirements

252.204-7020
NIST SP 800-171 DoD Assessment Requirements

252.204-7021
Cybersecurity Maturity Model Certification Requirements

What Our Compliance Means for Your Program

When you partner with Means Engineering, the NIST SP 800-171 requirements that flow down through your DoD contracts are already met at the manufacturing level. CUI is handled in a documented, verifiable environment.

01
Your CUI flow-down requirement is met
We implement all 110 NIST SP 800-171 Rev. 2 controls required under DFARS 252.204-7012. We implement all 110 NIST SP 800-171 Rev. 2 controls required under DFARS 252.204-7012. CUI flows to us without gaps in your supply chain.

02
Verifiable in SPRS
Our implementation carries a perfect SPRS score of 110, which your Contracting Officer can confirm directly in the Supplier Performance Risk System.

03
Continuously affirmed
We complete annual self-assessments and affirm continued compliance to SPRS.

04
CMMC-ready
Our NIST 800-171 program is the foundation of CMMC 2.0 Level 2. We are preparing for third-party (C3PAO) assessment under CMMC 2.0 Level 2 as DoD phasing continues.

Verify Our Compliance Summary

Our NIST SP 800-171 implementation and score are independently verifiable through the Department of Defense’s Supplier Performance Risk System (SPRS). Contracting Officers and prime contractors can confirm our current score and annual affirmation at any time.

To request our SPRS documentation or discuss the CUI-handling requirements for your program, contact us through the form below. We share status documentation with teaming partners per applicable program guidelines.

Compliance at a glance
Framework
NIST SP 800-171 Rev. 2

SPRS Score
110 / 110

Affirmation
SPRS · Annually

Alignment
CMMC 2.0 Level 2 (Advanced)

Looking for a NIST 800-171 compliant, CMMC-ready manufacturing partner?

We work with prime contractors and DoD program offices that need CUI handled by a supplier with a verified NIST SP 800-171 posture. Contact us to request our SPRS documentation, discuss flow-down requirements, or discuss flow-down requirements for your program.

Request Compliance Documentation →

(760) 931-9452  ·  Carlsbad, CA

ABOUT US

MEI features depth of experience in medical, industrial, semiconductor equipment and military products. All product development efforts start with a unique set of requirements, yet we deliver results that share a common standard of excellence in form, function and design.

Our turn-key capabilities provide smart, simple solutions to cumbersome outsourcing issues, and provide our clients with an intelligent route from concept to market.

Read More...

ISO-13485

Copyright © 2026 Means Engineering, Inc. · Website by Alter Impact