NIST SP 800-171 · DoD SPRS Self-Assessment

Know Your SPRS Score
Before DoD Does

Score all 110 NIST 800-171 controls. See your official SPRS number (can be negative), identify your weakest control families, and get a prioritized remediation roadmap — in under 15 minutes.

110 controls · 14 families · DoD PIEE submission walkthrough · Free executive PDF report

88–110 · Low Risk 55–87 · Moderate Risk 1–54 · High Risk Below 0 · Critical
Current SPRS Score
110 / 110
Low Risk
Complete all 110 controls, then get your free executive PDF report including your remediation roadmap and PIEE submission walkthrough.
110
/ 110 SPRS
Low Risk

Your SPRS score demonstrates strong implementation of NIST 800-171 controls.

This Executive Report Contains
Final SPRS score on 110-point scale
Color-coded control family heatmap
30/60/90-day remediation roadmap
Highest-weight unmet controls first
DoD PIEE submission walkthrough
CTA to book free posture assessment
Control Family Heatmap

Percentage of controls met per family. Red = highest remediation priority.

Prioritized Remediation Roadmap

Highest-weight unmet controls first — 5-point items before 3-point before 1-point.

DoD PIEE Submission Walkthrough

How to enter your SPRS score in the Supplier Performance Risk System after completing your self-assessment.

1
Log in to PIEE at piee.eb.mil. Use your CAC or ECA certificate. New users must register through the PIEE enrollment portal and await DCSA account approval (typically 3–5 business days).
Roles required: Supplier Performance Risk System (SPRS) Self-Reporting User
2
Navigate to SPRS → Assessments → Self-Assessment. Select "NIST SP 800-171 DoD Assessment" from the assessment type dropdown.
The menu path is: SPRS → Assessment → NIST SP 800-171 Assessment → Create New
3
Enter your CAGE code and contractor information. Select the system being assessed (your primary CUI enclave). Enter the CAGE code associated with your contract.
If you have multiple CUI enclaves, you must submit a separate SPRS entry for each.
4
Enter your score. Input your computed NIST 800-171 score (this value, which can be negative). Certify that the self-assessment was completed by a qualified individual.
Scores below 110 require a Plan of Action & Milestones (POA&M) documenting how and when gaps will be remediated.
5
Upload Plan of Action (POA&M) for any unimplemented controls. DoD DFARS 252.204-7020 requires a POA&M upload when your score is below 110. The POA&M must include control IDs, remediation actions, responsible parties, and target completion dates.
CMMC Level 2 certification requires POA&M closure — not just documentation. Open POA&M items at time of C3PAO assessment are an automatic finding.
6
Submit and retain confirmation. Save your PIEE submission confirmation number. Update SPRS whenever your score changes materially (remediation completed or new gap identified). DCSA and contracting officers can view your score in real time.
Annual re-assessment is required under DFARS 252.204-7020. Scores must be current within 12 months to maintain contract eligibility.
DFARS 252.204-7020 · Next Step
Generate Your CMMC POA&M from These Gaps
Your gaps are pre-loaded. Get a DoD-formatted Plan of Action & Milestones with weakness descriptions, remediation steps, and target dates — ready for PIEE upload.

Ready to Close Your Gaps?

CoreRecon SDVOSB-certified SOC drives your SPRS score up, manages your POA&M, and prepares your SSP artifacts for C3PAO assessment. Book your free 30-minute posture review.

Book Free Posture Assessment →