Posting your CMMC Level 1 affirmation in SPRS is the action that takes you from “we're compliant” to “we're bid-ready.” Until it's posted, primes can't verify your status and contracting officers can't award. This guide walks you through the actual click-by-click process.
Before you start
- PIEE account for the affirming official (owner, CEO, or delegated CIO)
- SPRS “Cyber Reports” role granted on that account
- Your CAGE code from SAM.gov
- Your SSP and self-assessment showing MET on all 15
- 30 minutes, longer if PIEE setup is needed
The 8 steps (summary)
- Confirm PIEE access. Log into piee.eb.mil with the affirming official's account.
- Add the SPRS role if it's not there. Request via your CAGE/HLO admin.
- Open Cyber Reports in the SPRS application.
- Click CMMC Status (Level 1 affirmations are filed here, distinct from NIST SP 800-171 assessments).
- Enter required fields, CAGE, system name, affirmation date, scope description.
- Submit the affirmation. The affirming official must click the affirmation checkbox personally.
- Verify the posting appears by refreshing and confirming the affirmation date is now on record.
- Calendar the renewal for 11 months from today. The annual affirmation is the easiest part to forget.
Each step (with screenshots and the specific gotchas) is on the printable walkthrough: SPRS walkthrough →
Common gotchas
- The wrong person tries to affirm. Only the formally designated affirming official can post.
- New PIEE account, no SPRS role. You'll log in and see nothing useful. Add the Cyber Reports role first.
- CAGE mismatch. The CAGE in PIEE must match the CAGE in SAM.gov exactly.
- Confusing Level 1 with Level 2 forms. NIST SP 800-171 score entry is the Level 2 path. Level 1 is the CMMC Status affirmation.
Get the printable walkthrough
Or follow the full DIY path: The Free DIY CMMC Level 1 Handbook.
FAQ
Do I need a PIEE account first?
Yes. PIEE (Procurement Integrated Enterprise Environment) is the wrapper that owns SPRS access. If you don't have a PIEE account already, set one up at piee.eb.mil before you try to post. New accounts can take 1 to 3 business days to approve.
What role do I request in SPRS?
Cyber Reports, Contractor. This is the role that lets the affirming official post the Level 1 affirmation. Your CAGE/HLO administrator approves it.
Is there a numerical score at Level 1?
No. Level 1 is a binary affirmation, MET or NOT MET on all 15 controls. The numerical SPRS score on the -203 to +110 scale is for NIST SP 800-171 / CMMC Level 2.
What if I can't mark MET on all 15?
Don't post yet. Level 1 doesn't have a plan-of-action substitute, you need MET on all 15 to be Level 1 compliant. Fix the gap, then post. Posting a knowingly inaccurate affirmation is the False Claims Act exposure.