Are you prepared to self-assess?

by | Dec 18, 2020 | CMMC, Compliance

Last month, I talked about the interim rule for CMMC and that as of November 30, 2020, contracting officers will check the Supplier Performance Risk System (SPRS) database to confirm that a contracting agency has an active SPRS Assessment prior to the award of a new contract or the continuation of an existing one.

While you can now self-assess using the SPRS database, it is not as straightforward as you might think (or want). Here are a few lessons learned that I wanted to share as we have been walking some of our clients through the process.

  • You must have an account with the DLA, the Defense Logistics Agency.
  • You must have the DLA’s Wide Area WorkFlow (WAWF) set up for your organization. The WAWF is a secure, web-based system for electronic invoicing, receipt, and acceptance. It is also where you set up your contract admin.
  • You also may have to work with DLA to ensure your WAWF contains a SAM’s CAGE code with the same admin assigned.

If your WAWF is not completed correctly and your contract does not have an admin assigned to it, you will be unable to continue past step #6 – Roles in the self-assessment process.

Now you might think since your organization already does business with the federal government that these pieces would be in place. That is not necessarily true.

If you are subcontractor who mainly subs to prime contractors, you would send that prime your invoice so they can pay you. As a result, some clients have not set up their WAWF because they have never needed it in the past. It is something that catches them unprepared as they begin the self-assessment process.

The DOD is adamant that to continue to do business with them, primes and subcontractors must demonstrate compliance. We don’t want anyone to be rejected by not being able to get through the process or demonstrate a low SPRS score to the DOD.

Let us guide you through the process or provide support information when setting up your SPRS or DLA WAWF account.

If you’re interested in learning more, please feel free to reach out.

Subscribe to Our Monthly Newsletter

Free education for cybersecurity.


Your personal information will not be shared and you are able to unsubscribe at any time.