SPRS explained
What is SPRS? Understanding your assessment score
The Supplier Performance Risk System is the government system holding assessment information. An UpCISO score is a preparation calculation, not a submission to SPRS.
What it records
SPRS includes NIST SP 800-171 assessment results and CMMC information. The government service has separate processes for entering, reviewing and affirming results.
Read your score carefully
Check the selected framework and assessment before interpreting a score. Unanswered requirements and unconfirmed answers make a preparation calculation incomplete. A score alone does not establish eligibility or certification.
Next step
Review the deductions in Score, confirm the underlying findings against evidence, and use the official SPRS instructions for any required government submission. UpCISO does not submit or affirm results on your behalf.
Official sources
Reviewed 2026-09-22. Check current sources and your contract when making assessment or eligibility decisions.