SPRS Scorecard
Your Supplier Performance Risk System score calculated from actual control coverage, not from what someone typed into a form. Updates continuously as your telemetry changes. Every control assessment backed by sealed audit evidence.
Scorecard format
| Control ID | Description | Score | Status | Evidence |
|---|---|---|---|---|
| AC.L2-3.1.1 | Authorized Access Control | 5 | Implemented | 847 events |
| AU.L2-3.3.1 | System Audit Logging | 5 | Implemented | 24,432 records |
| CA.L2-3.12.1 | Security Control Assessment | 5 | Implemented | 28 PoC cycles |
| CA.L2-3.12.2 | Plan of Action | 5 | Implemented | Auto-generated |
| IA.L2-3.5.1 | Identification & Authentication | 5 | Implemented | 1,203 events |
| IA.L2-3.5.3 | Multifactor Authentication | 3 | Partial | Partial coverage |
| IR.L2-3.6.1 | Incident Handling | 5 | Implemented | Real-time detection |
| SI.L2-3.14.6 | Security Monitoring | 5 | Implemented | Firmware Sentinel™ |
| MA.L2-3.7.5 | Nonlocal Maintenance | 0 | Gap — POA&M | No evidence |
Evidence basis: All scores derived from sealed audit evidence in the Quantum Audit Chain\u2122. Control coverage verified by Proof-of-Control\u2122 (36 probes every 6 hours). Gap controls automatically appear in the LiveSSP\u2122 POA&M.
This scorecard is generated from live telemetry and updates automatically. To support this score in an assessment, provide the Quantum Audit Chain\u2122 Verification Report and the Proof-of-Control\u2122 Certificate.
Common questions
What is the SPRS score?+
The Supplier Performance Risk System (SPRS) score is a numerical assessment of a defense contractor's implementation of NIST SP 800-171 controls. Required under DFARS 252.204-7019. Ranges from -203 (zero controls implemented) to +110 (all controls implemented). Submitted to the SPRS database and visible to prime contractors and the DoD during source selection.
How does MDRwatchdog calculate the SPRS score?+
MDRwatchdog LiveSSP™ calculates the SPRS score from actual control coverage — which controls have sealed audit evidence demonstrating implementation, and which have detected gaps. The score updates continuously as new evidence accumulates or gaps are remediated. It is not a point-in-time self-assessment; it reflects your actual security posture at the moment of generation.
How is this different from a manual self-assessment?+
A manual SPRS self-assessment is a one-time exercise where someone evaluates each of the 110 NIST 800-171 controls and assigns a score. The result reflects what they believe is true and goes stale immediately. MDRwatchdog LiveSSP™ derives the score from sealed audit evidence — what is actually happening on your endpoints — and updates the score as that evidence changes.
Can I submit this score to the SPRS database?+
Yes. The MDRwatchdog SPRS Scorecard provides the control-by-control breakdown you need to complete your NIST SP 800-171 DoD Assessment Methodology scoring. The score is calculated from sealed, verifiable evidence. If asked to support the score in an audit or assessment, you provide the Quantum Audit Chain™ verification report.
Related compliance forms
Plain-language answers to the questions buyers ask most — readiness and evidence, not certification or legal advice.
Submit your SPRS score with evidence, not guesses.
MDRwatchdog LiveSSP\u2122 calculates your SPRS score from live telemetry. Book a 15-minute review.
Schedule your 15-minute review