Step-by-step how-to · primary sources
How to submit your SPRS score to SPRS (step by step)
To submit your NIST SP 800-171 self-assessment score to SPRS: (1) complete your assessment and calculate your score; (2) register at the PIEE portal (piee.eb.mil); (3) open the SPRS module; (4) enter your score, assessment date, and affirming official. An alternative email submission goes to sprs@sprs.csd.disa.mil with your score, CAGE code, and assessment date.
Posting your score through PIEE and SPRS
The score you post is a representation to the government, so it must be honest and computed with the DoD Assessment Methodology. Report the number your assessment actually supports — never a higher one, and never with gaps omitted.
Complete your assessment and calculate your score
Before anything is posted, you need a current NIST SP 800-171 self-assessment. Under the DoD Assessment Methodology v1.2.1 (32 CFR 170.24), start at 110 and deduct 5, 3, or 1 point per unmet requirement. The score you post must be honest and computed with that methodology — it is a representation to the government, so do not report a number the assessment does not support or quietly omit gaps.
Register at the PIEE portal (piee.eb.mil)
SPRS submissions go through the Procurement Integrated Enterprise Environment (PIEE) at piee.eb.mil. If you do not already have an account, register and request the SPRS role for your company. Access is tied to your CAGE code, so have it on hand.
Open the SPRS module
Once logged in to PIEE, open the Supplier Performance Risk System (SPRS) module. SPRS is where the NIST SP 800-171 self-assessment score lives. You see only your own scores in SPRS — a prime contractor cannot look up its subcontractors’ scores there.
Enter your score, assessment date, and affirming official
Record the self-assessment score, the date the assessment was completed, the assessment scope, and the affirming official. Per DFARS 252.204-7019, the score must reflect a current assessment — generally one completed within the last three years. Without a current System Security Plan (3.12.4, which is unscored) no assessment can be completed, so confirm your SSP exists before you post.
Or submit by email if you cannot use the portal
An alternative submission path is email to sprs@sprs.csd.disa.mil with your score, CAGE code, and assessment date. The portal is the primary route; the email path exists as a fallback. Either way, the obligation to post a current, honestly computed score under DFARS 252.204-7019 is the same.
Sources: DFARS 252.204-7019 (the contractor posts a current NIST SP 800-171 self-assessment score, generally within three years) and DFARS 252.204-7020 (government verification; a prime requests the score directly). Scoring follows the DoD Assessment Methodology v1.2.1 and 32 CFR 170.24. Need the number first? Use the SPRS score calculator.
Your score is a representation to the government
Muster drafts your assessment artifacts and walks you through submission; you review, compute the score with the DoD methodology, and post it under your own affirming official. Muster does not certify anyone — only an authorized C3PAO certifies. Because the posted score is a representation to the government, the safe posture is the honest one: report what the assessment supports and disclose your gaps in a POA&M rather than rounding the number up. For what closing those gaps tends to cost, see the CMMC Level 2 cost guide, and for the rollout timeline see the CMMC deadline page.
Muster’s paid Level 2 Readiness Sprint includes an SPRS submission walkthrough so the posting step is not the first time you see it.
Straight answers
Where do I submit my SPRS score?
You submit it through the Procurement Integrated Enterprise Environment (PIEE) portal at piee.eb.mil, then the SPRS (Supplier Performance Risk System) module. That is where your NIST SP 800-171 self-assessment score is posted under DFARS 252.204-7019. An alternative path is to email the score to sprs@sprs.csd.disa.mil with your CAGE code and assessment date.
Do I email it or use the portal?
The PIEE portal and SPRS module are the primary route, and that is how most contractors post their score. Emailing sprs@sprs.csd.disa.mil with your score, CAGE code, and assessment date is the documented alternative when you cannot use the portal. Either way the score must reflect a current self-assessment computed with the DoD Assessment Methodology.
Can my prime see my SPRS score?
No. Contractors see only their own scores in SPRS; a prime cannot look up a subcontractor’s score in the system. Under DFARS 252.204-7020, a prime that needs your score requests it from you directly. You control whether and how you share it.
What if I don’t have an SSP yet?
You cannot complete the assessment without one. NIST SP 800-171 requirement 3.12.4 (the System Security Plan) is unscored under the DoD methodology, but without a current SSP no assessment can be completed — and therefore no valid score can be posted. Draft and maintain your SSP before you assess and submit.
This is compliance information, not legal advice. The DFARS clauses and DoD Assessment Methodology as they apply to your contract govern; for representation and eligibility questions, consult qualified counsel. Muster has no file upload and never asks you to send CUI — the free assessment runs entirely in your browser.
Related guides
What counts as CUI?
What CUI actually is for a defense contractor — technical data, drawings, export-controlled material — the three questions everyone asks, CUI vs. classified, and what to do when you receive it.
NIST 800-171 SSP template
What an SSP must contain per 3.12.4, what assessors flag first, and a free blank template (Markdown or Word) — no email gate.
POA&M template (NIST 800-171)
The 32 CFR 170.21 eligibility rules — 88-point minimum, the never-eligible six, the 180-day clock — plus a worked example and a free blank template.
CMMC Level 2 cost
Real price bands by path — self-serve software, consultant-led, enclave route — with the C3PAO assessment fee separated out honestly.
Tools: SPRS score calculator · scoring methodology · CMMC Phase 2 deadline
Know your score before you post it.
The free assessment walks the 110 NIST SP 800-171 requirements in plain English and computes your SPRS score with the exact DoD methodology — so the number you submit is one you can stand behind.
Get your free Muster ScoreThe free score is live now. Join the waitlist for early access to the done-for-you Level 2 Readiness Sprint and founding-cohort pricing.