SPRS assessment date checker
DFARS 204.7302 states that contractors subject to the relevant NIST SP 800-171 assessment requirement need at least a Basic assessment that is current at time of award. The normal currency rule is not more than three years old unless the solicitation specifies a shorter period.
DFARS 204.7302 uses a three-year currency rule unless a shorter period is specified in the solicitation.
Calendar age is only the first check
An unexpired assessment can still be the wrong record for a proposal when the system boundary changed. Compare the SPRS record with the current SSP, system name, environment, CAGE information, and the actual system that will process, store, or transmit the contract information. A cloud migration or enclave redesign can make a historical score poor evidence of the present environment even before the three-year anniversary.
Option exercises and contract extensions can also make assessment currency an ongoing contract-management issue. Keep a compliance calendar with assessment dates, CMMC status, affirmations, POA&M closeout dates, and system UIDs rather than treating SPRS as a one-time submission portal.
Plan reassessment early
Set internal reminders months ahead of the expected date. That creates time to review scope, update the SSP, collect new evidence, investigate score changes, and correct government-system data before the contracting deadline. If a solicitation specifies a shorter validity period, use that date instead of the three-year default.
Read the three-year rule guide and SPRS score expiration workflow for a more complete checklist.