AffirmReady™Readiness Check
Menu

AffirmReady is launching soon. Help articles describe the platform as it will work at launch.

How do I submit my Level 1 self-assessment and affirmation in SPRS?

KB-078 | Applies to: All plans | Last reviewed: November 7, 2026 | Version 1.0

This guide is for your company's Affirming Official, the senior person who makes the annual SPRS affirmation. It walks you through reviewing what your team prepared in AffirmReady, checking the evidence in your own systems, entering your CMMC Level 1 self-assessment in SPRS, and making the affirmation. The affirmation is your company's own statement to the government. AffirmReady helps you prepare for it, but it never submits or affirms anything for you.

The short answer

Review your PDF report and the evidence it points to, then sign in to SPRS through PIEE. Under Cyber Reports, add a new CMMC Level 1 self-assessment for your CAGE code, enter the details, and select Continue to Affirmation. Read the statement, check the box and select Affirm. Save the printable record SPRS gives you, and have an Owner record the date in AffirmReady.

Before you start

  • Your team has finished the self-assessment in AffirmReady. For the full checklist, see KB-051.
  • Your company has an active SAM.gov registration with a CAGE code.
  • You have a PIEE account with the SPRS Cyber Vendor User role for your CAGE code. See Step 4 if you don't yet.
  • Getting PIEE access for the first time can take several business days, so start that early.

Step 1: Review what AffirmReady gives you

AffirmReady holds your company's own, self-reported records. AffirmReady doesn't check or verify them, so your review is what counts.

  1. Get the PDF report. An Owner downloads it from the Billing page, under Export your data, by selecting PDF report. If you're a Read-only member, ask an Owner for a copy. The report opens with a summary of your last recorded SPRS affirmation date and your next due date, then lists every requirement and assessment objective with its status, the date it was last updated, and your team's answer. After that come your evidence register and your policies.
  2. Check every status. Every assessment objective should show Ready. Anything marked Not started, In progress or Needs review means your company isn't ready to affirm yet. See KB-075.
  3. Read the How we do this answers. Each answer should describe what your company really does today and who does it. If an objective doesn't apply to your shop, the answer should say why. If an answer doesn't match what you see in your shop, send it back to your team.
  4. Look over your evidence register. Each entry says what the evidence is, where it's kept, who owns it and when it's next reviewed. Entries that show Needs review should be brought up to date first. See KB-013.
  5. Check your policies. Each policy should show an Owner's sign-off with a date, and its wording should match how your shop really works. See KB-076.
  6. Note your SPRS affirmation dates. On the SPRS affirmation page, check your next due date. You'll update this page after you affirm.

Step 2: Check the evidence in your own systems

AffirmReady never stores evidence files. Your evidence register only records where each item lives in your own systems, such as SharePoint, Google Drive, a shared drive or a paper file.

  • Open the links in your evidence register, or ask the owner of each item to show it to you. A link only opens for people who already have access in your own system.
  • For every requirement, look at the evidence yourself and confirm it is current and in final form. Drafts and working notes don't count.
  • Make sure nothing in your evidence folder holds passwords, sign-in codes or Controlled Unclassified Information (CUI).

Step 3: Write down what SPRS will ask for

Have these ready before you sign in:

  • Assessment date: the date your company's self-assessment was done.
  • Scope: Enterprise if the self-assessment covers your whole company, or Enclave if it covers only a defined part of it.
  • Number of employees the self-assessment covers.
  • Included CAGE codes: the CAGE codes with access to the systems your self-assessment covers.
  • The Yes or No question: whether your company meets the FAR 52.204-21 requirements. Answer Yes only if every one of the 15 requirements is met. At Level 1 there's no partial credit and no option to list items to fix later, so close any gaps first. See KB-009.

Step 4: Get SPRS access through PIEE

SPRS is reached through PIEE, the Department of Defense's Procurement Integrated Enterprise Environment, at piee.eb.mil. Skip this step if you already have the role.

  1. If you're new to PIEE, select New User, then register as a Vendor. If you already have a PIEE account, go to My Account and choose Add Additional Roles.
  2. Choose the SPRS application and the SPRS Cyber Vendor User role, then enter your CAGE code as the location code.
  3. Finish the registration screens. Your company's Contractor Account Administrator in PIEE activates the role. That person is the Electronic Business point of contact listed in your SAM.gov registration, or someone they name. In a small company it's often the owner.
  4. Once the role is active, sign out of PIEE and sign back in.

Step 5: Enter your self-assessment in SPRS

You can do this yourself, or someone else with the SPRS Cyber Vendor User role can enter it and send it to you.

  1. Sign in to PIEE and open SPRS.
  2. Select Cyber Reports, choose your CAGE code from the list, and select Run Cyber Reports. An asterisk next to your CAGE code means you have the role you need.
  3. On the CMMC Assessments tab, choose the button to add a new CMMC Level 1 self-assessment.
  4. Enter the details from Step 3.
  5. Select Continue to Affirmation. If someone else is entering it for you, they enter your email address and select Transfer to AO, and SPRS emails you. You can also save the record and finish later.

Step 6: Make the affirmation

  1. If someone transferred the record to you, sign in, open Cyber Reports, choose your CAGE code and select Run Cyber Reports. Find the CMMC Level 1 self-assessment marked Pending Affirmation and select the pencil icon to open it.
  2. Review every detail, then select Continue to Affirmation, and select it again in the window that opens.
  3. Check your name, title and contact details. They come from your PIEE profile, so any corrections are made in PIEE. You can add other email addresses for your own records.
  4. Read the affirmation statement. You are stating that your company has put in place, and will keep in place, all of the Level 1 requirements for every system in the scope you entered.
  5. If anything is wrong, select Cancel and fix it. If everything is right, check the box to confirm the statement and select Affirm.

What done looks like

  • The record shows Final Level 1 Self-Assessment. This is the only status government users can see.
  • The record has a CMMC Unique Identifier (UID). A prime contractor or contracting officer may ask you for it.
  • If the record shows No CMMC Status, the Yes or No question was answered No.

Save your record

  1. In SPRS, select the Detail button in the CMMC UID column to open a printable record, and save it as a PDF. SPRS's Export button doesn't include CMMC results.
  2. Save that PDF in your own evidence folder, in 7 Annual Affirmation, with the dated PDF report you reviewed and a note of who affirmed and when. See KB-040.
  3. Ask an Owner to record the date on the SPRS affirmation page in AffirmReady, so every Owner gets reminders before the next one is due. See KB-073.

If you need to fix a mistake

You can still edit a record marked Incomplete or Pending Affirmation. A record marked Final Level 1 Self-Assessment can't be edited. To correct it, delete it and enter it again. Deleting removes it for every CAGE code it included, so enter and affirm the corrected record right away.

Do it again every year

A Final Level 1 Self-Assessment expires after one year and then shows No CMMC Status (Expired Assessment). Your company does a new self-assessment and a new affirmation before then. AffirmReady reminds every Owner 60, 30 and 7 days before your due date.

Getting help with SPRS or PIEE

  • SPRS questions: the SPRS Help Desk at sprs-helpdesk@us.navy.mil. For step-by-step help with the screens, use the Training section of the SPRS website at www.sprs.csd.disa.mil.
  • PIEE account questions: the PIEE Help Desk at 866-618-5988.
  • Never share your PIEE or SPRS sign-in with anyone, including AffirmReady. See KB-011.

Verification

SPRS and PIEE change their screens from time to time, so button and menu names may not match exactly. These steps were last checked on the date shown at the top of this article. If your screen looks different, use the SPRS Training section for the latest steps.

Still need help?

Email support@affirmready.com and include your company name and the email address on your AffirmReady account. Our team is available Monday through Friday, 8:00 AM to 5:00 PM Eastern, and replies within one business day.

For CMMC Level 1 readiness purposes only. Not legal advice. Your company is responsible for the accuracy of its self-assessment and affirmation.