NIST SP 800-171 COMPLIANCE MANAGED, ASSURRED, AFFORDABLE

The SPRS score is the self-assessment score derived from assessing all 110 assessment requirements, and 320 assessment objectives listed in NIST SP 800-171A. The score ranges from -203 to 110 where each requirement has a different scoring weight.

All DoD contractors with the DFARS 252.204-7019 clause in their contract are required to conduct a self-assessment of NIST SP 800-171 Rev 2 according to the DoD Assessment Methodology, and submit their assessment score to the Supplier Performance Risk System (SPRS).

RADICL helps with NIST SP 800-171 Rev 2 compliance by providing expert guidance for each of the 320 assessment objectives, while providing any needed templates. The RADICL Platform also provides a live self-assessment score within the dashboard to easily track the compliance journey.

The SPRS score must not be older than three years old. As per the CMMC final rule, a self-assessment score and attestation must be updated and submitted to SPRS annually for all CMMC Level 2 contractors.

The difference between NIST SP 800-171 Rev 2 compliance and CMMC is that 800-171 is a self-assessment, where as CMMC is a mixture of self-assessments, and assessments conducted by a Certified Third-Party Assessment Organization(C3PAO). CMMC also splits into 3 levels, where most companies will need to adhere to level 1 and 2, protecting Federal Contract Information (FCI), and Controlled Unclassified Information (CUI).