Free download · No cost · Instant access

SPRS Score Calculator
for DoD contractors

Calculate your NIST SP 800-171 self-assessment score, find your gaps, and know exactly what to report in SPRS — before a contracting officer asks for it.

Download the free calculator
✓All 110 NIST 800-171 requirements
✓Auto-calculates your SPRS score
✓Built by a Cyber AB RPA-led team
What's inside

Everything you need to calculate and understand your SPRS score.

An Excel workbook built on the DoD Assessment Methodology for NIST SP 800-171. Open it, work through your requirements, and walk away with a score you can actually defend.

All 110 NIST 800-171 requirements

Every security requirement across all 14 families, with penalty point values and the full requirement text from NIST SP 800-171 Revision 2.

Live SPRS score dashboard

A dashboard that calculates your running SPRS score in real time as you assess each control. See your score, your gaps, and your score impact by family — all in one view.

Four-status dropdown scoring

Mark each control Met, Partially Met, Unmet, or Not Assessed. The workbook applies the correct penalty deduction for each status using the DoD formula.

Assessor notes column

A notes column on every control row for implementation status, N/A justifications, and evidence references — the documentation assessors look for.

Family-level score breakdown

See which of the 14 control families is costing you the most — so you can prioritize remediation where it moves your score furthest.

Plain-language instructions

A built-in Instructions sheet explaining what SPRS is, how the score is calculated, what each status means, and how to submit your score to SPRS.

1
Dashboard
Live SPRS score, status summary cards, and score-by-family breakdown. Updates automatically as you assess.
2
Assessment
Your working sheet. All 110 requirements with dropdowns, penalty points, score formulas, and notes. Colour-coded by status.
3
Instructions
Plain-language guide to SPRS, the scoring methodology, status definitions, and how to submit.
How SPRS scoring works

Your SPRS score, explained plainly.

SPRS uses a specific DoD-defined formula. Understanding it is the first step to knowing where you stand — and which gaps are actually worth closing first.

The SPRS formula
SPRS score = 110 − the penalty points you’ve accrued

Start at 110, one point per requirement. Deduct penalty points for every requirement that is Partially Met, Unmet, or Not Assessed. The result runs from −203 (nothing implemented) to +110 (everything implemented).

Met
0 pts
Fully implemented, or genuinely not applicable. Nothing deducted. An N/A still has to be documented.
Partially met
Partial credit
Only a small number of requirements allow partial credit under the DoD methodology — most are all or nothing.
Unmet
Full penalty
Not implemented. The requirement’s full point value comes off your score.
Not assessed
Full penalty
The default. Scored the same as Unmet. Don’t submit until every requirement has been assessed.
5
Point requirements
The heaviest weighting — where your score moves most
3
Point requirements
Meaningful, but secondary to the 5-pointers
1
Point requirements
The majority — small individually, large in aggregate

Weightings come from the DoD Assessment Methodology, not from NIST. NIST SP 800-171 doesn’t rank its requirements — the point values, the partial-credit rules, and the −203 floor are all DoD’s. The calculator implements that methodology; it doesn’t invent one.

Free download

Download the SPRS Score Calculator.

Name and email, and it’s yours immediately. No sales call, and no follow-up unless you ask for one.

All 110 NIST SP 800-171 Rev 2 requirements — nothing missing
Built on the DoD Assessment Methodology — not an approximation
Live dashboard — your score is visible as you work
Assessor notes column — document your work as you go
Works in Excel and Google Sheets
Built by Greypike — a veteran-founded firm whose work is led by a Cyber AB Registered Practitioner Advanced. The same scoring methodology our practitioners use in client engagements.
Get the free calculator

You’ll go straight to the download page after submitting.

No spam. Unsubscribe any time. Privacy policy.

FAQ

Common questions about SPRS and this calculator.

What is a SPRS score and why does it matter?+
SPRS — the Supplier Performance Risk System — is the DoD database where contractors self-report their NIST SP 800-171 assessment score. Contracting officers can see it when evaluating you. A missing score, or a very low one, is a risk signal at exactly the moment you’d rather not be sending one.
Is this the official DoD calculator?+
No. It’s a Greypike-built workbook that implements the DoD Assessment Methodology — the scoring formula, the point weightings, and the partial-credit rules all follow it. You still submit your calculated score yourself at sprs.csd.disa.mil.
What’s the difference between a self-assessment and a CMMC assessment?+
A self-assessment is yours: you evaluate your own requirements and report the score. A CMMC Level 2 assessment is conducted by an independent C3PAO who verifies it. Mandatory third-party assessments are currently suspended — but your DFARS 252.204-7012 obligations, your SPRS score, and your annual affirmation are not. The plain-English breakdown →
Which revision of NIST 800-171 does this cover?+
Revision 2, which is what SPRS self-reporting and CMMC assessments currently run on. Revision 3 is coming — the proposed FAR CUI rule would raise the baseline to Rev 3 across federal contracting, not just DoD. We’ll release a Rev 3 version when it becomes the assessment standard.
What score do I need to be competitive?+
There isn’t a published minimum — the score is a risk indicator, not a pass mark. That said, a score well below zero says you have substantial gaps, and +110 says everything is implemented. If you’re prioritising, the 5-point requirements are where your score moves fastest.
Is the tool really free?+
Yes. No trial, no paid tier, no expiry. Enter your email and the file is yours to keep and share with your team.
What if my score is worse than I expected?+
That’s the useful outcome — you found out before a contracting officer did. Book a scoping session and we’ll go through your results, tell you which gaps actually matter, and give you an honest read on what closing them involves. Including if the answer is that you can handle it yourself.

Need help reading your score?

A scoping session covers your results, the gaps that actually move the number, and what closing them would involve. No obligation.

Book a scoping session