Reference · Cybersecurity & CMMC
DFARS 252.204-7019
Notice of NIST SP 800-171 DoD Assessment Requirements
DFARS 252.204-7019 is a solicitation provision notifying offerors that, to be eligible for a DoD award, they must have a current NIST SP 800-171 assessment — not more than three years old — posted in the Supplier Performance Risk System (SPRS).
What it is
A solicitation provision that puts offerors on notice: before award, the offeror must have completed a NIST SP 800-171 self-assessment using the DoD Assessment Methodology and recorded the resulting score in SPRS.
Why it exists
It lets the government see an offeror's NIST SP 800-171 posture before making an award, rather than discovering gaps afterward.
Who it applies to
Offerors responding to DoD solicitations that include the provision — i.e., those subject to DFARS 252.204-7012.
Compliance triggers
Complete a Basic (self) assessment, compute the score against the DoD Assessment Methodology, and post it in SPRS; keep the score current within the last three years.
Frequently asked
What does DFARS 252.204-7019 require before award?
It requires the offeror to have a current NIST SP 800-171 assessment score — no more than three years old — posted in SPRS at the time of award. Without a current score on record, the offeror is not eligible for award.
This is the kind of compliance signal Longlead reads to infer which upcoming defense projects will need cleared or compliance-ready scope — delivered as a cited evidence dossier with your confidence and lead time, 12–24 months before it surfaces as a named solicitation. You make the call, from your own channels; nothing leaves the system.
Or just see what Longlead finds for your scope.
Tell us what you sell and what you don't — and see the demand Longlead is inferring for you right now.