Finish the assessment decisions first
Confirm the assessment scope and the supported compliance conclusion. The Level 1 rule identifies minimum inputs including the level, status date, scope, associated industry CAGE codes, and compliance result. Verify those details against the reviewed assessment record rather than entering a convenient approximation.
If the assessment is incomplete, finish the investigation and remediation first. A portal record does not correct an unsupported technical conclusion. Keep open questions visible to the internal decision maker, and resolve ambiguity about which systems or organization the assessment covers before moving to the entry step.
Arrange the right access and people
Identify who will enter the assessment and who is authorized to affirm it. Confirm access through the official SPRS process and verify the organization context. Use the current access instructions on the SPRS CMMC reference page; do not assume a different government-system login provides the required role.
Prepare a short handoff note with the approved assessment details, the responsible internal contacts, and the location of the review record. Do not circulate passwords or shared credentials as part of the handoff. If access fails, use the official support route rather than asking an unrelated person to submit under their own organization.
Use the current guide during entry
Open the Level 1 quick-entry guidance or tutorial linked from the official SPRS CMMC page. Compare the organization and scope shown in the portal with the prepared record. Read the labels carefully and check the saved record, not only the data that appeared on an input screen.
This article intentionally avoids reproducing a sequence of button labels that may become stale. Treat any current portal notice or validation message as something to resolve before concluding the entry is complete. Assessment entry and affirmation should each be verified in the appropriate record.
Record the outcome and maintain ownership
Keep a controlled record of the completed portal step and the people responsible for future maintenance. Record the relevant dates and the next internal review, while avoiding unnecessary copies of sensitive portal information. Confirm that the saved assessment and required affirmation correspond to the intended scope.
Tell the business owner what was completed and what remains to be done. A useful status distinguishes assessment performed, result entered, and affirmation completed. The annual affirmation guide explains how to keep the continuing-compliance review connected to the maintained technical record.
Sources & further reading
- 32 CFR 170.15: Level 1 self-assessment ↗
- SPRS: CMMC reference materials and entry tutorials ↗
- 32 CFR 170.22: affirmation ↗
Published October 24, 2026. Government and company references were checked while preparing this page. General information and practical workflow suggestions; confirm the requirements and services that apply to your organization.
