Overview

Your ability to submit SPRS scores to the DoD depends on your CMMC certification level. This article explains who can submit scores and how to do it.

Who Can Submit SPRS Scores

Level 1 Self-Assessment

Organizations can conduct their own Level 1 self-assessment and submit their SPRS score directly to the DoD SPRS portal.

Level 2 Self-Assessment

Organizations can conduct their own Level 2 self-assessment and submit their SPRS score directly to the DoD SPRS portal.

Level 2 Certification Assessment

Only an accredited CMMC Third-Party Assessment Organization (C3PAO) can conduct a Level 2 certification assessment and submit the results to SPRS on your behalf.

Level 3 Certification Assessment

Only the Defense Industrial Base Cybersecurity Assessment Center (DIBCAC) can conduct Level 3 assessments and submit the results to SPRS.

How to Submit Your SPRS Score (Self-Assessments Only)

1. Log into the SPRS portal
2. Navigate to the NIST SP 800-171 Assessment section
3. Enter your score and assessment date
4. Submit for your organization's CAGE code

Important Notes

• You must resubmit your SPRS score whenever there is a significant change to your security posture
• SPRS scores should be updated at least annually
• Ensure your CAGE code is correct before submitting
• Keep documentation of your self-assessment for audit purposes

Need help? Contact support@secureframe.com or use the Help widget in the Secureframe app.