Notice on the Use of the Supplier Performance Risk System
DFARS 252.204-7024 notifies offerors that DoD will use SPRS risk assessments and supplier performance information in the source selection process for solicitations above the simplified acquisition threshold. It is the formal acknowledgment that SPRS data — including CMMC and 800-171 scores — is a source-selection input.
Who must comply
All offerors on covered DoD solicitations.
What it requires
- 01Acknowledge that DoD will consider SPRS-derived risk and performance information when evaluating offers.
- 02Understand that SPRS data is not appealable through this clause; corrections go through the SPRS dispute process.
Related clauses
- DFARS 252.204-7019Notice of NIST SP 800-171 DoD Assessment Requirements
DFARS 252.204-7019 requires offerors on DoD solicitations involving CUI to have a current NIST SP 800-171 self-assessment score posted in the Supplier Performance Risk System (SPRS) before they are eligible for award. The score must not be more than three years old at the time of the offer.
- DFARS 252.204-7020NIST SP 800-171 DoD Assessment Requirements
DFARS 252.204-7020 is the contract clause companion to -7019: once awarded, the contractor must maintain a current NIST SP 800-171 assessment in SPRS, allow DoD access to verify it, and flow the requirement down to subcontractors that will handle CUI. It binds the obligation throughout contract performance, not just at offer.