Contracting Officers shall document in the contract file verification of the Supplier Performance Risk System (SPRS) NIST SP 800-171 summary level score.

Contracting Officers shall document acceptance or non-acceptance of receipt of a Contractor’s system security plan to validate NIST SP 800-171 security requirements in accordance with DFARS 252.204-7020 NIST SP 800-171 Assessments Requirements.