Skip to content

SPRS Score Estimator

Estimate your SPRS score before you report it.

Enter how many NIST SP 800-171 requirements are still open in each weighted tier. Get an illustrative SPRS score, a POA&M-eligibility read, and a ranked list of which gaps to close first, by score impact. About 10 minutes, nothing leaves your browser.

Free toolIllustrative, not an official SPRS submission

Decision-support boundary

The official SPRS score runs from -203 to +110 (DoD Assessment Methodology). This is an illustrative self-estimate, not an official SPRS submission or a C3PAO assessment result.

This tool models the weighted arithmetic (110 minus 5/3/1-point subtractors) from the tier counts you enter, plus the 32 CFR 170.21 POA&M rules. It bottoms at -196, not the official -203, because a base 1/3/5 model does not reproduce the conditional partial-credit deductions (MFA 3.5.3, FIPS 3.13.11) behind the official floor. Confirm every figure with your assessor before reporting to SPRS.

Step 1 of 1 · your open requirements, live score

Enter your open gaps by weight tier. The score updates as you type.

No sign-in for the illustrative estimate. The full CMMC readiness package, with your specific controls and evidence, is the gated next step.

A current SSP (§3.12.4) is the DFARS prerequisite for a reportable score. Required to start.

Highest weight: MFA, FIPS-validated crypto, boundary protection. Each subtracts 5. Not POA&M-eligible.

Each subtracts 3. Not POA&M-eligible (except CUI encryption, 3.13.11).

Each subtracts 1. These are the requirements that may be deferred on a POA&M.

Shapes how the estimate should be read: a reportable self-assessment or a C3PAO-verified certification.

Select your SSP status to start

Your estimated score appears as you enter open gaps. Blank tiers count as fully implemented. No sign-in required.

Your estimate will appear here

As you enter your open requirements you will see an estimated SPRS score, a readiness band, your POA&M-eligible and must-implement gap counts, and a ranked list of which gaps to close first, all before any commitment is requested.

Next step

Ready to turn this estimate into a defensible SPRS score?

The free estimate uses weighted tier counts. The full readiness package maps your specific NIST 800-171 gaps to weighted SPRS impact, POA&M eligibility, and evidence. Decision-support output, not a sales pitch.

Illustrative self-estimate, not an official SPRS submission or a C3PAO assessment. DoD Assessment Methodology and 32 CFR 170.21. Method and sources shown above.