CMMC_Quick Entry Guide for Contractors_Level 1.pdf
PDF 533 KB Posted
- Solicitation number
- FA860126Q0093
About this file
This is a quick entry guide for CMMC Level 1 Self-Assessment submission in the Supplier Performance Risk System (SPRS) V4.0, managed by the Naval Supply and Logistics Command (NSLC) at Portsmouth Naval Shipyard. The guide provides step-by-step instructions for organizations to enter and manage Cybersecurity Maturity Model Certification (CMMC) assessment data through the SPRS application.
Users must first obtain a "SPRS Cyber Vendor User" role through the Procurement Integrated Enterprise Environment (PIEE) to access CMMC assessment entry and modification functions. After logging into PIEE and navigating to the SPRS Cyber Reports module, organizations select their appropriate hierarchy by Contracting Activity Group (CAGE) code and initiate a new Level 1 CMMC Self-Assessment. During submission, users must enter assessment details including the assessment date, assessing scope, number of employees covered, and confirm compliance with RFO clause 52.240-93 security requirements. The assessment must be affirmed by an Affirming Official (AO)—a senior-level representative with authority to certify the organization's ongoing CMMC compliance. Once affirmed, a "Final Level 1 Self-Assessment" becomes visible to government personnel and remains valid for one year before automatically expiring. Users with the Cyber Vendor User role may edit or delete certain assessment status types. The guide includes specific instructions for transferring assessments to designated affirming officials via email if the data entry user is not the AO.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Amendment - FA860126Q0093_final.pdf | ||
| UTV and Golf Cart Rental PWS.pdf | ||
| WD 2015-4731 Rev29.pdf | ||
| FA860126Q0093_final.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
CMMC Quick Entry Guide SPRS V4.0
Approved for public release; distribution is unlimited
Cybersecurity Maturity Model Certification (CMMC)
CMMC LEVEL 1 SELF-ASSESSMENT
QUICK ENTRY GUIDE
VERSION 4.0
NSLC PORTSMOUTH BLDG. 153-2 PORTSMOUTH NAVAL SHIPYARD, PORTSMOUTH, NH 03804-5000
Version 4.0 DEC 2024 1
1. PIEE Access: A “SPRS Cyber Vendor User” role is required to enter CMMC Assessment information. PIEE Access Instructions:
https://www.sprs.csd.disa.mil/access.htm
2. SPRS Application and Module Access:
a. PIEE landing page: https://piee.eb.mil
b. Click “LOG IN”
Screenshot Dtd 09 JAN 2024
c. Select SPRS:
d. Select Cyber Reports:
3. Cyber Reports Module: Select the desired Hierarchy, identified by the HLO, from the drop down.
NOTE: An asterisk * indicates the user has the SPRS Cyber Vendor User role (access to add/edit/delete)
3.1 Add New Assessment: Within the CMMC Assessments tab, select “Add New
Level 1 CMMC Self-Assessment”.
Version 4.0 DEC 2024 2
3.2 Enter Assessment Details: Enter assessment data and select “Continue to Affirmation”.
NOTE: Compliance with the security requirements specified in RFO clause 52.240-93 is required to achieve a “Final Level 1 Self-Assessment”.
NOTE: CAGE Hierarchy is imported from the System for Award Management (SAM).
RFO clause 52.240-93 can be found here: https://www.acquisition.gov/far-overhaul/ far-part-deviation-guide/far-overhaul-part-52#FAR_52_240_93
3.3 Transfer to Affirming Official (AO): If the user entering the assessment is not the AO, the assessment can be forwarded via email, to the AO by entering their email and selecting “Transfer to AO”.
Version 4.0 DEC 2024 3
3.4 Affirm the Assessment: Review the assessment details, certify review of the affirmation statement, and select “Affirm”.
3.5 Assessment Edit/Delete: A Cyber Vendor User may edit or delete certain CMMC Status Types.
NOTE: A “Final Level 1 Self-Assessment” will automatically become “No CMMC Status (Expired Assessment)” after 1 year.
NOTE: “Final Level 1 Self-Assessment” is the only CMMC Status Type that will be visible to Government Personnel.
File details come from the government source that posted it. Updated .