Attachment 6 - PIEE CMMC Level 1 Help Guide.pdf
PDF 502 KB Posted
- Solicitation number
- FA930126Q0008
About this file
This is a quick entry guide for the Cybersecurity Maturity Model Certification (CMMC) Level 1 Self-Assessment process within the Supplier Performance Risk System (SPRS) Version 4.0, published by the Naval Sea Logistics Center Portsmouth in December 2024.
The guide provides step-by-step instructions for contractors to enter and manage CMMC Level 1 self-assessments in SPRS. Key procedural requirements include: (1) obtaining "SPRS Cyber Vendor User" role access through PIEE (Procured Integrated Enterprise Environment) at https://piee.eb.mil; (2) navigating to the Cyber Reports module and selecting the appropriate company hierarchy identified by HLO (Hierarchical Level Owner); (3) completing assessment details including assessment date, assessing scope, employee count, and compliance confirmation with FAR clause 52.204-21 security requirements; (4) designating an Affirming Official (AO)—a senior-level representative responsible for certifying the organization's compliance with CMMC program requirements; (5) transferring the assessment to the AO via email if the data entry person is not the AO; and (6) having the AO review and affirm the assessment. The guide notes that CAGE hierarchy information is automatically imported from the System for Award Management (SAM), that "Final Level 1 Self-Assessment" status automatically expires after one year, and that only assessments with "Final Level 1 Self-Assessment" status are visible to Government Personnel. Users with appropriate roles may edit or delete assessments with certain status types.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
CMMC Quick Entry Guide SPRS V4.0
Approved for public release; distribution is unlimited
Cybersecurity Maturity Model Certification (CMMC)
CMMC LEVEL 1 SELF-ASSESSMENT
QUICK ENTRY GUIDE
VERSION 4.0
NSLC PORTSMOUTH BLDG. 153-2 PORTSMOUTH NAVAL SHIPYARD, PORTSMOUTH, NH 03804-5000
CMMC Quick Entry Guide SPRS V4.0
Version 4.0 DEC 2024 1
1. PIEE Access: A “SPRS Cyber Vendor User” role is required to enter CMMC Assessment information. PIEE Access Instructions:
https://www.sprs.csd.disa.mil/access.htm
2. SPRS Application and Module Access:
a. PIEE landing page: https://piee.eb.mil
b. Click “LOG IN”
Screenshot Dtd 09 JAN 2024
c. Select SPRS:
d. Select Cyber Reports:
3. Cyber Reports Module: Select the desired Hierarchy, identified by the HLO, from the drop down.
NOTE: An asterisk * indicates the user has the SPRS Cyber Vendor User role (access to add/edit/delete)
3.1 Add New Assessment: Within the CMMC Assessments tab, select “Add New
Level 1 CMMC Self-Assessment”.
https://www.sprs.csd.disa.mil/access.htm https://piee.eb.mil/piee-landing/ https://piee.eb.mil/
Version 4.0 DEC 2024 2
3.2 Enter Assessment Details: Enter assessment data and select “Continue to Affirmation”.
NOTE: Compliance with the security requirements specified in FAR clause 52.204–21 is required to achieve a “Final Level 1 Self-Assessment”.
NOTE: CAGE Hierarchy is imported from the System for Award Management (SAM).
3.3 Transfer to Affirming Official (AO): If the user entering the assessment is not the AO, the assessment can be forwarded via email, to the AO by entering their email and selecting “Transfer to AO”.
https://www.ecfr.gov/current/title-48/chapter-1/subchapter-H/part-52/section-52.204-21 https://www.ecfr.gov/current/title-48/chapter-1/subchapter-H/part-52/section-52.204-21
Version 4.0 DEC 2024 3
3.4 Affirm the Assessment: Review the assessment details, certify review of the affirmation statement, and select “Affirm”.
3.5 Assessment Edit/Delete: A Cyber Vendor User may edit or delete certain CMMC Status Types.
NOTE: A “Final Level 1 Self-Assessment” will automatically become “No CMMC Status (Expired Assessment)” after 1 year.
NOTE: “Final Level 1 Self-Assessment” is the only CMMC Status Type that will be visible to Government Personnel.
File details come from the government source that posted it. Updated .