Submitted CMMC Level 1 to SPRS and It Felt Too Easy?

You worked through Level 1, entered your status in SPRS, and it was over in minutes. If your first reaction was "that felt too easy, are there additional steps," you are in good company. It is one of the most common questions suppliers ask after submitting, and the honest answer is reassuring once you understand where the real work lives.

The short version. Submitting can feel easy because the hard part is not the click. It is the assessment and the evidence behind it. Before you submit, every applicable objective has to be MET or N/A, with no items left to fix later. The affirmation is a separate step performed by a senior official. After that, you keep the record for six years and do it again next year.

Why It Feels Too Easy

There is no third-party assessor at Level 1, no audit day, and no score to calculate. So the moment of entering your status in SPRS is genuinely short. That is by design. Level 1 is a self-assessment, and the government trusts you to do it honestly and to keep the proof.

The uneasy feeling comes from the mismatch between how big the obligation is and how small the final action feels. The action is small. The obligation is not. What makes the submission real is everything that should already be true before you make it.

What Has to Be True Before You Submit

If you want to submit with confidence, three things need to be in place first.

• Every applicable objective is resolved. All 59 assessment objectives across the 15 requirements are MET or N/A. There is no partial credit and no score.
• Nothing is left for later. Level 1 does not allow a Plan of Action and Milestones. You cannot submit with open gaps and a promise to fix them.
• The evidence exists and is findable. For each determination, the proof behind it is held somewhere you can retrieve it, not scattered across laptops and email.

If all three are true, the short submission is exactly as easy as it felt, because the work was already done. If any of them is not, the submission is a claim you cannot back up.

The Affirmation Is a Separate Step

Here is the detail that trips people up most. Entering your status and affirming it are two different actions. Suppliers regularly describe entering a status, assuming they were finished, and only later realizing the affirmation was never completed. Others describe a single confirmation, "one little box," and worry that cannot be all there is.

Both are the same lesson. A senior official at your company, the Affirming Official, has to affirm the result. If that step is skipped, the record is not valid. The affirmation is annual, and it is a formal attestation, so the person making it should be able to see the assessment and evidence behind it before they do.

After You Submit, the Six-Year Clock and Next Year

Submitting is not the end of the obligation. Two things carry forward.

First, retention. You keep the assessment and its evidence for six years under 32 CFR 170.15. If anyone asks you to show the basis for your affirmation, that record is your answer.

Second, the annual cycle. Level 1 is reassessed and re-affirmed every year. Next year is not a fresh start from scratch. It is confirming what is still true, updating what changed, and affirming again. Suppliers who kept their record organized breeze through it. Suppliers who improvised the first time rebuild from memory.

The Record That Makes the Click Trustworthy

AssessrLog is the system of record that makes the small submission trustworthy. It holds every determination, the evidence behind it, and the history of how you got there, so when your official affirms, they are affirming something they can actually see and defend. Next year, the record is already there. The product overview walks through how it is built.

One boundary we hold firmly. AssessrLog assembles the package. It never submits and never affirms for you. Entering the status and affirming in SPRS stay with you and your official.

Frequently Asked Questions

I submitted my Level 1 status. Are there additional steps? Yes, if the affirmation was not completed. Entering the status and affirming it are separate. A senior official has to affirm the result, and without that step the record is not valid.

Is there a score I need to hit for Level 1? No. Level 1 has no numeric score. Every applicable objective is MET or N/A, and you affirm the whole result.

Can I submit with a few things still to fix? No. There is no Plan of Action and Milestones at Level 1. Everything applicable must be resolved before you submit and affirm.

How long do I keep everything after submitting? Six years, under 32 CFR 170.15, including the assessment and its evidence.

Does AssessrLog submit to SPRS for me? No. AssessrLog readies the record and the package. Entering the status and affirming in SPRS are steps you and your official perform. There is no automated submission.