Atch 6 SPRS Basic Assessment Guide.pdf

Steps to Completing SPRS Basic Assessment

STEP 1 – COMPLETE A SELF ASSESSMENT

To Complete and obtain Score for Self Assessment go to https://projectspectrum.io/#!/

Next to the magnifying icon you will see Cyber Readiness Check – CLICK THAT

You will need to either LOGIN or Sign Up to begin the self assessment.

Once signed in the system, answer the questions to the best of your ability. Be prepared as there are a lot of questions to answer. This could take 20-30 minutes. If you have an IT POC, suggest you have them available to help respond to questions.

Once submitted you will receive a printout that is approximately 26 pages. Save this document as you will need your score and date submitted when you submit your Basic Assessment to WEBPTSMH.fct@navy.mil .

Solicitation # FA480121Q0011

Attachment 6 Page 1 of 3 https://projectspectrum.io/#!/ mailto:WEBPTSMH.fct@navy.mil

STEP 2 – SUBMIT BASIC ASSESSMENT

OPTION 1 (Preferred for this Sprint) - Email WEBPTSMH.fct@navy.mil the following information and copy the Sprint POC on the email submission.

Do Not Attach Your Self-Assessment to the email ONLY answer the following questions in the email

NOTE: #6-8 are new! Edits to existing assessments will require completing the SSP name and date fields.

1. Assessment Date (MM/DD/YYYY)

2. Assessment Score (-205 to 110)

3. Scope of Assessment (choose one)

* Enterprise - Entire Company's Network under the CAGEs listed

* Enclave - Standalone under Enterprise CAGE as Business Unit (test enclave, hosted resources, etc.)

* Contract - Contract specific SSP Review

4. Plan of Action completion date (MM/DD/YYYY you intend to have any deficiencies addressed and the 110 score achieved. If score is 110, N/A.) (You can give yourself up to a year to complete)

5. Included CAGE(s)

6. Name of System Security Plan (SSP) assessed

7. SSP Version/Revision (not mandatory)

8. SSP Date (MM/DD/YYYY)

The following is our Company Information:

Firm Name:

Mail Address:

Website Address:

Duns:

Cage:

OPTION 2 – Submit Basic Self Assessment directly into SPRS; however, note this could take days to upload and process and not be as immediate as the email.

Enter your NIST SP 800-171 Basic assessment results directly in SPRS, which is accessible through the Procurement Integrated Enterprise Environment (PIEE) (https://piee.eb.mil). You will need a SPRS Cyber Vendor role in PIEE to enter/edit your results. A "Contractor/Vendor (Support User)" role allows you to

Solicitation # FA480121Q0011

Attachment 6 Page 2 of 3 mailto:WEBPTSMH.fct@navy.mil https://piee.eb.mil/ see your SPRS scores, including view-only access to cyber assessment result. Users can have either or both roles on their PIEE account. These roles are approved by your company's PIEE CAM in that system.

The Quick Entry Guide on our website can help you enter your results, once you have the Cyber Vendor role: https://www.sprs.csd.disa.mil/pdf/NISTSP800-171QuickEntryGuide.pdf)

Solicitation # FA480121Q0011

Attachment 6 Page 3 of 3 https://www.sprs.csd.disa.mil/pdf/NISTSP800-171QuickEntryGuide.pdf