CMMC Level 1 Self QuickEntryGuide.pdf

PDF 509 KB Posted

Attached to
Scaffolding Services
Solicitation number
N6449826Q0053
Issued by

About this file

This document is an instructional guide for entering Cybersecurity Maturity Model Certification (CMMC) Level 1 self-assessments into the Supplier Performance Risk System (SPRS) Version 4.0 application. The guide provides step-by-step procedures for contractors and vendors to complete and submit CMMC assessments through the PIEE (Procurement Integrated Enterprise Environment) portal.

To access the system, users must first obtain a "SPRS Cyber Vendor User" role through PIEE at https://piee.eb.mil, then navigate to the SPRS application and select the Cyber Reports module. Users enter assessment details including the assessment date, assessing scope (organization employee count), and confirm compliance with FAR clause 52.204-21 security requirements. The CAGE (Commercial and Government Entity) code hierarchy is automatically imported from the System for Award Management (SAM). If the data entry user is not the Affirming Official (AO), the assessment can be transferred via email to the AO for completion. The AO must review the assessment details and certify the affirmation statement before finalizing the submission. Once affirmed, a "Final Level 1 Self-Assessment" becomes the only visible assessment type to government personnel and will automatically expire after one year, converting to "No CMMC Status (Expired Assessment)." Cyber Vendor Users retain the ability to edit or delete assessments with certain CMMC Status Types as needed.

View the file

Other files

File Type Posted
Solicitation Amendment - N6449826Q00530001.pdf PDF

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

CMMC Quick Entry Guide SPRS V4.0

Approved for public release; distribution is unlimited

Cybersecurity Maturity Model Certification (CMMC)

CMMC LEVEL 1 SELF-ASSESSMENT

QUICK ENTRY GUIDE

VERSION 4.0

NSLC PORTSMOUTH BLDG. 153-2 PORTSMOUTH NAVAL SHIPYARD, PORTSMOUTH, NH 03804-5000

CMMC Quick Entry Guide SPRS V4.0

Version 4.0 DEC 2024 1

1. PIEE Access: A “SPRS Cyber Vendor User” role is required to enter CMMC Assessment information. PIEE Access Instructions:

https://www.sprs.csd.disa.mil/access.htm

2. SPRS Application and Module Access:

a. PIEE landing page: https://piee.eb.mil

b. Click “LOG IN”

Screenshot Dtd 09 JAN 2024

c. Select SPRS:

d. Select Cyber Reports:

3. Cyber Reports Module: Select the desired Hierarchy, identified by the HLO, from the drop down.

NOTE: An asterisk * indicates the user has the SPRS Cyber Vendor User role (access to add/edit/delete)

3.1 Add New Assessment: Within the CMMC Assessments tab, select “Add New

Level 1 CMMC Self-Assessment”.

https://www.sprs.csd.disa.mil/access.htm https://piee.eb.mil/piee-landing/ https://piee.eb.mil/

Version 4.0 DEC 2024 2

3.2 Enter Assessment Details: Enter assessment data and select “Continue to Affirmation”.

NOTE: Compliance with the security requirements specified in FAR clause 52.204–21 is required to achieve a “Final Level 1 Self-Assessment”.

NOTE: CAGE Hierarchy is imported from the System for Award Management (SAM).

3.3 Transfer to Affirming Official (AO): If the user entering the assessment is not the AO, the assessment can be forwarded via email, to the AO by entering their email and selecting “Transfer to AO”.

https://www.ecfr.gov/current/title-48/chapter-1/subchapter-H/part-52/section-52.204-21 https://www.ecfr.gov/current/title-48/chapter-1/subchapter-H/part-52/section-52.204-21

Version 4.0 DEC 2024 3

3.4 Affirm the Assessment: Review the assessment details, certify review of the affirmation statement, and select “Affirm”.

3.5 Assessment Edit/Delete: A Cyber Vendor User may edit or delete certain CMMC Status Types.

NOTE: A “Final Level 1 Self-Assessment” will automatically become “No CMMC Status (Expired Assessment)” after 1 year.

NOTE: “Final Level 1 Self-Assessment” is the only CMMC Status Type that will be visible to Government Personnel.

File details come from the government source that posted it. Updated .