Complying with NIST 800-171