Free Download · No Cost · Instant Access

SPRS Score Calculator
for DoD Contractors

Calculate your NIST SP 800-171 self-assessment score, identify your compliance gaps, and know exactly what to report in SPRS — before a contracting officer asks for it.

Download the free calculator
✓All 110 NIST 800-171 controls
✓Auto-calculates your SPRS score
✓Built by Registered Practitioners
What's inside

Everything you need to calculate and understand your SPRS score.

The Greypike SPRS Score Calculator is a branded Excel workbook built on the official DoD NIST SP 800-171 scoring methodology. Open it, work through your controls, and walk away with your score.

All 110 NIST 800-171 controls

Every security requirement across all 14 control families, with penalty point values and the full requirement text from NIST SP 800-171 Revision 2.

Live SPRS score dashboard

A dashboard that calculates your running SPRS score in real time as you assess each control. See your score, your gaps, and your score impact by family — all in one view.

Four-status dropdown scoring

Mark each control Met, Partially Met, Unmet, or Not Assessed. The workbook automatically applies the correct penalty deduction for each status using the official DoD formula.

Assessor notes column

A dedicated notes column on every control row for documenting implementation status, N/A justifications, and evidence references — the documentation assessors look for.

Family-level score breakdown

See which of the 14 control families is hurting your score the most — so you can prioritize remediation where it has the biggest SPRS impact.

Plain-language instructions

A built-in Instructions sheet explaining what SPRS is, how the score is calculated, what each status means, and how to submit your score to the DoD SPRS system.

1
📊 Dashboard
Live SPRS score, status summary cards, and score-by-family breakdown. Updates automatically as you assess controls.
2
📋 Assessment
Your working sheet. All 110 controls with dropdowns, penalty points, score formulas, and notes. Color-coded by status.
3
📖 Instructions
Plain-language guide to SPRS, the scoring methodology, status definitions, and how to submit to DoD SPRS.
How SPRS scoring works

Your SPRS score explained — simply and accurately.

SPRS uses a specific DoD-defined formula. Understanding it is the first step to knowing where you stand and what will move your score.

The SPRS Formula
SPRS Score = 110 + sum of all score impacts
Start at 110 (one point per control). Deduct penalty points for every control that is Partially Met, Unmet, or Not Assessed. The sum of all deductions subtracted from 110 is your SPRS score. Range: −203 (all controls unmet) to +110 (all controls fully met).
Met
0 pts
Fully implemented, or genuinely not applicable. No points deducted. N/A must be documented.
Partially Met
−½ penalty
Partially implemented. Half the control's penalty points are deducted, rounded up to the nearest whole number.
Unmet
−full penalty
Not implemented. The full penalty point value is deducted from your score.
Not Assessed
−full penalty
Default status. Treated the same as Unmet. Do not submit a score until all controls are assessed.
5
Point controls
44 controls · 220 total points at risk
3
Point controls
14 controls · 42 total points at risk
1
Point controls
51 controls · 51 total points at risk
Free Download

Download the free SPRS Score Calculator.

Enter your name and email and we'll send you the calculator immediately. No sales call. No follow-up unless you ask.

All 110 NIST 800-171 Rev 2 controls — nothing missing
Built on the official DoD SPRS scoring methodology — not an approximation
Live dashboard updates as you assess — your score is always visible
Assessor notes column included — document your work for C3PAO review
Works in Excel and Google Sheets
Built by Greypike — a Cyber AB Registered Practitioner Advanced firm. The same scoring methodology our practitioners use in client engagements.
Get the free calculator

You'll be taken directly to the download page after submitting.

No spam. Unsubscribe any time. Privacy policy.

FAQ

Common questions about SPRS and this calculator.

What is a SPRS score and why does it matter?+
SPRS (Supplier Performance Risk System) is the DoD database where defense contractors self-report their NIST SP 800-171 compliance score. Contracting officers can view your score when evaluating bids. A missing or very low score can disqualify you from contract awards — especially as CMMC Phase 2 rolls out and more solicitations require demonstrated cybersecurity posture.
Is this the official DoD SPRS calculator?+
No — this is a Greypike-built tool that implements the official DoD scoring methodology from NIST SP 800-171 Revision 2. The calculation logic, penalty point values, and scoring formula match the official methodology. For self-reporting, you submit your calculated score directly to SPRS at sprs.csd.disa.mil.
What's the difference between SPRS self-assessment and a CMMC assessment?+
A SPRS self-assessment is what you report yourself — you evaluate your own controls and submit the score to DoD. A CMMC Level 2 assessment is conducted by a third-party C3PAO who independently verifies your compliance. CMMC Phase 2 requires the C3PAO assessment for most CUI-handling contracts. Self-assessment alone is not sufficient for Level 2 certification — but knowing your SPRS score is an important first step in understanding your current posture.
Which version of NIST 800-171 does this cover?+
This calculator covers NIST SP 800-171 Revision 2 — the version currently used for CMMC assessments and SPRS self-reporting. NIST 800-171 Revision 3 exists but is not yet used as the basis for CMMC assessments. We'll update the calculator when Rev 3 becomes the assessment standard.
What score do I need to be competitive for DoD contracts?+
There's no universal minimum score required — SPRS scores are used by contracting officers as a risk indicator, not a pass/fail threshold. That said, a score significantly below 0 signals substantial compliance gaps. A score of +110 means every control is fully implemented. Most contractors working toward CMMC Level 2 should aim to close all major gaps, especially in the 5-point control families (access control, encryption, remote access, incident response), which account for the most SPRS point risk.
Is the tool free?+
Yes. The SPRS Score Calculator is completely free. No trial, no paid version, no expiry. Enter your email above and the file is yours to keep and use with your team.
What if I need help interpreting my results?+
Greypike offers a free CUI scoping session for contractors who want to understand their results and map out their compliance path. We'll review your score, identify your highest-priority gaps, and give you an honest picture of what achieving compliance looks like for your organization. Book a free session here.

Need help interpreting your score?

A free 45-minute scoping session with Greypike covers your results, your highest-impact gaps, and your compliance path.

Book a free scoping session