CMMC · Self-assessment
Know your SPRS score. Post it with confidence.
The simplest step a defense supplier can take this quarter: a guided self-assessment against all 110 controls, the DoD scoring methodology applied correctly (1, 3 and 5-point weights, from -203 to 110), the quick wins that move the score most, and a number you can post in SPRS and defend to a prime.
Fixed fee
Scoped in a 30-minute call. No surprises after.
1 to 2 weeks
From kickoff to the delivered report
6
named deliverables, listed below
Who it is for
Suppliers who need a current, defensible SPRS score now and a clear path toward Level 2 later
The same scoring the Department uses, applied by practitioners who prepare suppliers for C3PAO assessments.
What you get
- Guided self-assessment of all 110 NIST SP 800-171 controls with our engineer
- SPRS score calculated with the DoD Assessment Methodology and the worksheet to prove it
- Quick-win list: the controls that raise your score fastest, with fixes
- Conditional-status check: are you at 88 or above with only 1-point items left open?
- Submission guidance for SPRS and a one-page readiness summary for primes
- Upgrade path to the full Gap Readiness Package with the work already credited
Questions
Straight answers.
Can we do the self-assessment ourselves?
You can, and many suppliers post an optimistic number that a prime or the Department later questions. The package exists so the score is right the first time and backed by a worksheet.
What score do we need?
Level 2 self-assessment requires 110, or conditional status at 88 or above with a POA&M covering only eligible items: requirements worth 1 point (plus CUI encryption that is in place but not FIPS-validated), and none of the six the rule keeps off the POA&M. Every 3- and 5-point requirement must be met. We tell you exactly which items stand between you and each threshold.
What is an SPRS score?
Your NIST SP 800-171 self-assessment score posted in the Supplier Performance Risk System, as DFARS 252.204-7019 and 7020 require. The DoD method ranges from 110 down to negative 203. Primes and the Department use it to judge risk, and the Justice Department has treated inflated scores as possible False Claims Act fraud.Source: DefenseScoop, 18 June 2026
Start here