SPRS Score Calculator for IT Services & MSPs

IT services firms and MSPs often act as External Service Providers handling CUI or security-protection data, which pulls them into assessment scope. Getting scoping and cloud (FedRAMP Moderate or equivalent) right is critical.

What you need to know

• Your SPRS score starts at a baseline of 110 and subtracts a weighted value (5, 3, or 1) for each unimplemented requirement — it can go negative (as low as −203).
• A score of 110 is a Final self-assessment; 88–109 is Conditional with a POA&M; below 88 you can't affirm a Conditional or Final status.
• A Conditional Level 2 self-assessment is valid 180 days to close your POA&M; a Final self-assessment is valid 3 years with annual affirmations.

Clauses that likely apply to you

Free tools