Attachment 5 - CMMC - PIEE SPRS Entry Guide_FA930126Q0034.pdf
PDF 509 KB Posted
- Solicitation number
- FA930126Q0034
About this file
This is a quick entry guide for CMMC Level 1 self-assessment submissions in the Supplier Performance Risk System (SPRS) Version 4.0, administered by the Naval Sea Logistics Center (NSLC) Portsmouth. The guide provides step-by-step instructions for contractors to enter, manage, and affirm Cybersecurity Maturity Model Certification (CMMC) assessment data within the SPRS application.
The process requires users to obtain a "SPRS Cyber Vendor User" role and access PIEE (Procurement Integrated Enterprise Environment) at https://piee.eb.mil, then navigate to SPRS and select the Cyber Reports module. Users must select their organization hierarchy (identified by HLO/CAGE code, which is imported from the System for Award Management) and add a new Level 1 CMMC self-assessment. Assessment details include the assessment date, assessing scope, number of employees covered, and confirmation of FAR clause 52.204-21 compliance, which is required to achieve a "Final Level 1 Self-Assessment" status. The Affirming Official (AO)—a senior-level organizational representative—must review and certify the assessment before final submission. Assessment records can be edited or deleted by authorized users, though "Final Level 1 Self-Assessment" status automatically expires after one year and becomes "No CMMC Status (Expired Assessment)." Only Final Level 1 Self-Assessment status is visible to Government Personnel.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
CMMC Quick Entry Guide SPRS V4.0
Approved for public release; distribution is unlimited
Cybersecurity Maturity Model Certification (CMMC)
CMMC LEVEL 1 SELF-ASSESSMENT
QUICK ENTRY GUIDE
VERSION 4.0
NSLC PORTSMOUTH BLDG. 153-2 PORTSMOUTH NAVAL SHIPYARD, PORTSMOUTH, NH 03804-5000
CMMC Quick Entry Guide SPRS V4.0
Version 4.0 DEC 2024 1
1. PIEE Access: A “SPRS Cyber Vendor User” role is required to enter CMMC Assessment information. PIEE Access Instructions:
https://www.sprs.csd.disa.mil/access.htm
2. SPRS Application and Module Access:
a. PIEE landing page: https://piee.eb.mil
b. Click “LOG IN”
Screenshot Dtd 09 JAN 2024
c. Select SPRS:
d. Select Cyber Reports:
3. Cyber Reports Module: Select the desired Hierarchy, identified by the HLO, from the drop down.
NOTE: An asterisk * indicates the user has the SPRS Cyber Vendor User role (access to add/edit/delete)
3.1 Add New Assessment: Within the CMMC Assessments tab, select “Add New
Level 1 CMMC Self-Assessment”.
https://www.sprs.csd.disa.mil/access.htm https://piee.eb.mil/piee-landing/ https://piee.eb.mil/
Version 4.0 DEC 2024 2
3.2 Enter Assessment Details: Enter assessment data and select “Continue to Affirmation”.
NOTE: Compliance with the security requirements specified in FAR clause 52.204–21 is required to achieve a “Final Level 1 Self-Assessment”.
NOTE: CAGE Hierarchy is imported from the System for Award Management (SAM).
3.3 Transfer to Affirming Official (AO): If the user entering the assessment is not the AO, the assessment can be forwarded via email, to the AO by entering their email and selecting “Transfer to AO”.
https://www.ecfr.gov/current/title-48/chapter-1/subchapter-H/part-52/section-52.204-21 https://www.ecfr.gov/current/title-48/chapter-1/subchapter-H/part-52/section-52.204-21
Version 4.0 DEC 2024 3
3.4 Affirm the Assessment: Review the assessment details, certify review of the affirmation statement, and select “Affirm”.
3.5 Assessment Edit/Delete: A Cyber Vendor User may edit or delete certain CMMC Status Types.
NOTE: A “Final Level 1 Self-Assessment” will automatically become “No CMMC Status (Expired Assessment)” after 1 year.
NOTE: “Final Level 1 Self-Assessment” is the only CMMC Status Type that will be visible to Government Personnel.
File details come from the government source that posted it. Updated .