SPRS (Supplier Performance Risk System)
SPRS stands for Supplier Performance Risk System. SPRS is a Department of Defense system that gathers data on supplier performance and risk. It pulls delivery and quality data and produces risk assessments that defense buyers use when evaluating offers.
SPRS is also where defense contractors post cybersecurity information, including NIST SP 800-171 self-assessment scores and Cybersecurity Maturity Model Certification (CMMC) status. You access SPRS through PIEE with the right role.
Why it matters to a small contractor
If you want defense work and will handle controlled unclassified information, your cybersecurity score and CMMC status in SPRS can decide whether you are even eligible for award. Even small subcontractors get asked about it.
Example
A small electrical contractor is asked by a defense prime for its SPRS score before receiving drawings marked as controlled. The owner works with an IT consultant to complete the assessment and post it.
SPRS: common questions
How do I get into SPRS?
Register in PIEE and request the SPRS role for your CAGE code. Your company's PIEE administrator approves the role.
Do civilian agency contractors need SPRS?
SPRS is a DoD system. Civilian agencies have their own security requirements, but SPRS is mainly about defense work.
Want the contract without the paperwork? Send XL Eagle your price on an open government job. We write and submit the bid under our registrations, free to you. Find open jobs →