SPRS DoD discussion
Contact KLC Consulting: https://klcconsulting.net/contact/
What is the DoD’s SPRS? (Supplier Performance Risk System) Kyle Lai and Paul Casassa from KLC Consulting explain what’s required to file a submission, the DFARS requirements, and the submittal process. They also talk about KLC Consulting’s affordable help package if you need help or are not confident in your own DIY effort as you work toward NIST 800-171 compliance and CMMC compliance.
0:00 - Intro
0:08 – What is the DoD’s SPRS reporting requirement?
0:32 – SPRS captures NIST 800-171 and DFARS compliance status
1:45 – SPRS and DFARS 252.204-7020
2:42 – SPRS and DFARS 252.204-7012 and -7019
5:24 – Who determined self-assessment isn't “good enough”?
5:05 – Relationship between SPRS, DFARS 252.204-7020, and CMMC
5:42 – DFARS 252.204-7019 explained
6:24 – When these DFARS requirements took effect
6:56 – CMMC becomes effective; when?
7:32 – What information will you need to make your SPRS submittal?
8:38 – Who has access to your SPRS submittal information?
9:35 – What to do about requests from DoD or primes about cybersecurity compliance
10:42 – What compliance information SHOULD you provide?
11:08 – What compliance information SHOULD you NOT provide?
11:45 – Exceptions
12:30 – What to do if you haven’t submitted to the SPRS yet
13:58 – Need affordable help? KLC’s SPRS consulting package explained
14:48 – Where to begin? Scope your CUI, limit its footprint, and save money!
15:15 – KLC’s proprietary CUI data lifecycle minimizes costs!
17:20 – How to prioritize POAM gaps
18:35 – Why a NIST 800-171 template is the WRONG place to begin
20:48 – Who needs to be involved in CUI scoping
23:00 – Unique challenges to manufacturers
23:28 – Duration of KLC’s SPRS consulting service
24:38 – Manufacturers, legacy systems, and DoD cybersecurity
26:16 – How DIB subs should respond to prime compliance requests
28:17 – Next steps following SPRS submittal
31:20 – KLC provides as much or as little help as you need
31:42 – How to determine the best strategy for POAM remediation
33:29 – US national security and intelligence agency recommendations
36:05 – CISA “Shields-Up” alert discussion
36:50 – When to update score in SPRS
37:46 – Wrap-up, KLC is a cleared candidate C3PAO that provides help
KLC Consulting website: https://www.klcconsulting.net