Affirmation

Definition

An affirmation is the attestation, completed in SPRS by a senior company official, that the organization has implemented and will maintain the Level 1 security requirements. At Level 1 it is submitted when the self-assessment is completed and annually after that. It is a separate step from entering the assessment results, and it does not replace the annual self-assessment.

Level 1 needs both every year. 32 CFR 170.15(a)(1) requires the self-assessment on an annual basis, and 32 CFR 170.22(b)(1) requires the affirmation at completion and annually thereafter. Entering results and affirming them are two distinct actions in SPRS. Without a current affirmation, a supplier is not considered to hold a Level 1 status.

Term identity

Term

Affirmation

Framework

CMMC · Level 1

Authority

32 CFR § 170.22