What Happens If Your SPRS Score Is Below 88?

88 is a ratio, not an arbitrary cutoff

The DoD Assessment Methodology starts every assessment at a baseline of 110 and subtracts a weighted deduction for each requirement that isn't met. 88 is 80% of 110 — the threshold 32 CFR 170.21 sets for even being eligible to affirm a Conditional self-assessment. Score 88 to 109 with all your gaps POA&M-eligible, and Conditional is available. Score 110, and it's Final. Below 88, neither is on the table.

Below 88, there's no Conditional or Final — only No CMMC Status

A POA&M doesn't rescue a sub-88 score. Plans of action earn no credit toward the number itself, and the eligibility rule is a hard floor, not a sliding scale. A score of 87 with a solid remediation plan is still "No CMMC Status" until the score itself clears 88.

That status also isn't just a label — government personnel only see affirmed Conditional and Final statuses. "No CMMC Status," like "Incomplete" and "Pending Affirmation," is invisible to a contracting officer reviewing your record. Functionally, you don't have a score they can see yet.

Six requirements that disqualify you even above 88

Clearing 88 is necessary but not sufficient. Under 32 CFR 170.21, a Conditional status also requires that no POA&M item has a point value greater than 1 (with one narrow exception — encryption that's employed but not yet FIPS-validated, SC.L2-3.13.11, can sit on a POA&M as a 3-point item) and that none of six specific requirements are on the POA&M at all. If a not-met requirement isn't POA&M-eligible, the status is No CMMC Status regardless of your total score. The six:

• •AC.L2-3.1.20 — Verify and control/limit connections to and use of external systems.
• •AC.L2-3.1.22 — Control CUI posted or processed on publicly accessible systems.
• •PE.L2-3.10.3 — Escort visitors and monitor visitor activity.
• •PE.L2-3.10.4 — Maintain audit logs of physical access.
• •PE.L2-3.10.5 — Control and manage physical access devices.
• •CA.L2-3.12.4 — The System Security Plan itself. Without an SSP, the methodology treats the assessment as Incomplete, not just a low score, per DFARS 252.204-7012.

What to actually do if you're below 88

Work the gaps by point impact first — the 5-point requirements move your score the most per fix. Separately, and regardless of your total, check whether any of the six requirements above are among your not-met items; those need to be resolved outright since no POA&M timeline covers them. Once your score clears 88 and every remaining gap is genuinely POA&M-eligible, Conditional becomes available while you close the rest.