Know your SPRS score before the contracting officer asks.
A NIST SP 800-171 self-assessment kit for small defense subcontractors: a scoring worksheet, plus a draft System Security Plan outline and a Plan of Action & Milestones (POA&M) template filled in with your gaps.
$299 planned. Request it now. Nothing is charged and there is no checkout yet.
The button opens your email app with the questions below prefilled. Send it and we will reply within 2 business days.
What you get
- A scoring worksheet covering the 110 requirements of NIST SP 800-171, using the DoD Assessment Methodology scoring.
- A written summary of your answers with the gaps listed in plain English.
- A draft SSP outline and a POA&M template filled with your gaps.
- A short email thread to ask questions about the results.
Delivery is a few business days after we receive your answers.
Who it is for
Small companies that handle Controlled Unclassified Information (CUI) for a DoD prime, or that are asked for an SPRS score in a solicitation or flow-down.
What the request asks
Company name, work email, role, number of employees, whether you handle CUI (yes, no, not sure), and which prime asked for your score.
What this is not
- Not a C3PAO or third-party assessment, and not a CMMC certification.
- We do not enter or submit anything to SPRS for you. An authorized company official enters the score and makes the affirmation.
- No guarantee of a particular score or of contract eligibility. Not legal advice.
Why a score is asked for
- A Basic Assessment is a contractor self-assessment under the NIST SP 800-171 DoD Assessment Methodology, with results posted to SPRS: DFARS 252.204-7020.
- Where it applies, a current assessment (not more than 3 years old) is required to be considered for award: DFARS 252.204-7019.
- SPRS records the assessment date, score, scope, SSP details, POA&M date and confidence level: SPRS NIST SP 800-171 page.