A SPRS score is the result of a NIST SP 800-171 self-assessment, submitted to the DoD Supplier Performance Risk System. It ranges from -203 to 110, and any contractor holding CUI under DFARS 252.204-7019/7020 must have a current score on file — primes check it before awarding work.
Key facts
- 110 is a perfect score; each unimplemented requirement subtracts 5, 3 or 1 points
- Scores older than three years are invalid for award decisions
- A low score is legal to submit — a false score is a False Claims Act risk
- CMMC Level 2 assessments compare your claimed score against reality
Get an accurate, defensible number in 15 minutes with the free ITSecOps SPRS Score Calculator.
Before you submit that score: a self-assessed SPRS score is a certification to the U.S. Government. In June 2026 an Alabama contractor paid $507,144 after DCMA re-scored its self-assessment at −170. See how the False Claims Act applies to SPRS scores.