NIST 800-171 compliance: what assessors check and where self-assessments fail | Vulnox Blog