Supplier Performance Risk System
Also known as: SPRS
The Supplier Performance Risk System (SPRS) is the Department of Defense system of record where contractors post their NIST SP 800-171 assessment scores and CMMC affirmations. Contracting officers verify SPRS entries before award on solicitations that include DFARS 252.204-7019, -7020, or -7021.
Related terms
- Procurement Integrated Enterprise Environment
The Procurement Integrated Enterprise Environment (PIEE) is the DoD's single sign-on portal for procurement-related applications, including SPRS, WAWF, and the CMMC Enterprise Mission Assurance Support Service. Contractors must hold a PIEE account to post SPRS scores or CMMC affirmations.
- DFARS 252.204-7019
DFARS 252.204-7019 requires offerors on DoD solicitations involving CUI to post a current NIST SP 800-171 self-assessment score in the Supplier Performance Risk System (SPRS) before they are eligible for award. The score must not be more than three years old at the time of the offer.
- DFARS 252.204-7021
DFARS 252.204-7021 is the contract clause that makes a CMMC certification or self-assessment a material condition of award and continued performance on covered DoD contracts. It took effect November 10, 2025 as part of the 48 CFR final rule, and triggers the annual senior-official affirmation requirement under 32 CFR 170.22.