New: Autonomous AI risk intelligence is live — your compliance program in 12 minutes. Get started →

SPRS

The DoD's Supplier Performance Risk System — where your NIST 800-171 score lives.

SPRS (Supplier Performance Risk System) is the DoD's authoritative repository for supplier risk information. Contractors under DFARS 252.204-7012 must post a NIST 800-171 self-assessment score (out of 110).

A low or missing SPRS score is a real contracting risk — primes screen SPRS before flowing down work.

Related terms

CMMC

The DoD's Cybersecurity Maturity Model Certification, mandatory across the defense supply chain.

NIST 800-171

The 110-control baseline for protecting Controlled Unclassified Information (CUI).

POA&M

Plan of Action & Milestones — the roadmap for closing security control gaps.

See how Scarlet Risk covers SPRS.

One platform for compliance, cyber, crypto, and world-watch risk.

Schedule Live Demo