SPRS, the Supplier Performance Risk System, is the Department of Defense platform where contractors report cybersecurity posture related to NIST SP 800-171 and CMMC readiness.
An SPRS score reflects how closely an organisation aligns with the 110 NIST SP 800-171 security requirements. Many defence contracts require a current SPRS submission before award, making it an important baseline indicator of cybersecurity maturity across the defence supply chain.