Your calculator is ready.
Download it below — no email needed, the link goes straight to the file. We’ve also sent a copy to your inbox so you can find it again later.
Greypike SPRS Score Calculator
Free · no expiry · works in Excel and Google Sheets
Download not starting, or nothing in your inbox? Email us and we’ll send it straight over.
From download to a score you can defend.
Three sheets, five steps. The whole thing takes an afternoon if you have the right people in the room — usually whoever runs IT and whoever knows what’s actually written into your contracts.
Open the Assessment sheet
Your working sheet. All 110 NIST SP 800-171 requirements, each with its penalty point value and the full requirement text. Everything you need is on this one tab.
Set a status in column F
Use the dropdown to mark each requirement Met, Partially Met, Unmet, or Not Assessed. Column H updates the score impact automatically. Work through all 110 before you report anything.
Write your reasoning in column I
The notes column is where implementation evidence, not-applicable justifications, and remediation plans go. This is the part people skip and later regret — especially for anything marked Met on an N/A basis.
Watch the Dashboard
Your score updates live as you work. You’ll see the total, a count by status, and a family-level breakdown — which tells you where remediation would move the number most.
Report your score in SPRS
When the assessment is complete, self-report at sprs.csd.disa.mil. You’ll need a CAC or ECA certificate and your CAGE code. The score you enter should match the one in your workbook.
A note on what this is. The workbook implements the DoD Assessment Methodology for NIST SP 800-171 Rev 2 — the same formula behind the score you self-report. It’s a self-assessment tool, not an assessment: the number it produces is yours to report, and the notes you write are what makes it defensible if anyone later asks how you got there.
A score is a number. What matters is the scope behind it.
Two people can score the same and be in completely different positions, because they drew the boundary differently. If you haven’t settled your scope, that’s the higher-leverage piece of work.
Get your scope right first
Our 15-page CUI scoping workbook walks you through defining the smallest defensible boundary — the single biggest lever on what compliance ends up costing you.
Get the workbookTalk through what your score means
Bring your completed workbook and we’ll go through where you actually stand, which gaps are worth closing first, and what that involves — including if the answer is that you can handle it yourself.
Book a scoping sessionQuestions about your results? Email us. Greypike is a veteran-founded firm working exclusively with government contractors, led by a Cyber AB Registered Practitioner Advanced.
