CMMC Quick Entry Guide (Level 1 Self).pdf
PDF 509 KB Posted
- Attached to
- MAHG251029 Repair Water Tower #8
- Solicitation number
- FA301026Q0033
About this file
This is a quick entry guide for CMMC Level 1 self-assessments within the Supplier Performance Risk System (SPRS) version 4.0, administered by the Naval Sea Logistics Center at Portsmouth Naval Shipyard. The guide provides step-by-step instructions for federal contractors to enter, manage, and affirm their Cybersecurity Maturity Model Certification assessments.
Access to the CMMC assessment module requires a "SPRS Cyber Vendor User" role obtained through the Procurement Integrated Enterprise Environment (PIEE). Users must log into PIEE at https://piee.eb.mil, select the SPRS application, and navigate to the Cyber Reports module where they can select their organizational hierarchy by CAGE code. The assessment entry process includes four main phases: adding a new Level 1 self-assessment, entering assessment details including employee count and FAR clause 52.204-21 compliance confirmation, transferring the assessment to an Affirming Official if the data entry user is not the AO, and final affirmation by the AO. The affirmation statement certifies that the organization's information systems comply with CMMC requirements as defined in 32 CFR § 170. A "Final Level 1 Self-Assessment" automatically expires and converts to "No CMMC Status (Expired Assessment)" after one year, and only final assessments are visible to government personnel. Users with the Cyber Vendor User role may edit or delete assessments depending on their status type.
View the file
Other files
Show all 19
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
CMMC Quick Entry Guide SPRS V4.0
Approved for public release; distribution is unlimited
Cybersecurity Maturity Model Certification (CMMC)
CMMC LEVEL 1 SELF-ASSESSMENT
QUICK ENTRY GUIDE
VERSION 4.0
NSLC PORTSMOUTH BLDG. 153-2 PORTSMOUTH NAVAL SHIPYARD, PORTSMOUTH, NH 03804-5000
CMMC Quick Entry Guide SPRS V4.0
Version 4.0 DEC 2024 1
1. PIEE Access: A “SPRS Cyber Vendor User” role is required to enter CMMC Assessment information. PIEE Access Instructions:
https://www.sprs.csd.disa.mil/access.htm
2. SPRS Application and Module Access:
a. PIEE landing page: https://piee.eb.mil
b. Click “LOG IN”
Screenshot Dtd 09 JAN 2024
c. Select SPRS:
d. Select Cyber Reports:
3. Cyber Reports Module: Select the desired Hierarchy, identified by the HLO, from the drop down.
NOTE: An asterisk * indicates the user has the SPRS Cyber Vendor User role (access to add/edit/delete)
3.1 Add New Assessment: Within the CMMC Assessments tab, select “Add New
Level 1 CMMC Self-Assessment”.
https://www.sprs.csd.disa.mil/access.htm https://piee.eb.mil/piee-landing/ https://piee.eb.mil/
Version 4.0 DEC 2024 2
3.2 Enter Assessment Details: Enter assessment data and select “Continue to Affirmation”.
NOTE: Compliance with the security requirements specified in FAR clause 52.204–21 is required to achieve a “Final Level 1 Self-Assessment”.
NOTE: CAGE Hierarchy is imported from the System for Award Management (SAM).
3.3 Transfer to Affirming Official (AO): If the user entering the assessment is not the AO, the assessment can be forwarded via email, to the AO by entering their email and selecting “Transfer to AO”.
https://www.ecfr.gov/current/title-48/chapter-1/subchapter-H/part-52/section-52.204-21 https://www.ecfr.gov/current/title-48/chapter-1/subchapter-H/part-52/section-52.204-21
Version 4.0 DEC 2024 3
3.4 Affirm the Assessment: Review the assessment details, certify review of the affirmation statement, and select “Affirm”.
3.5 Assessment Edit/Delete: A Cyber Vendor User may edit or delete certain CMMC Status Types.
NOTE: A “Final Level 1 Self-Assessment” will automatically become “No CMMC Status (Expired Assessment)” after 1 year.
NOTE: “Final Level 1 Self-Assessment” is the only CMMC Status Type that will be visible to Government Personnel.
File details come from the government source that posted it. Updated .