Finds the requirement
BidBoard
Flags DLA DIBBS, SAM.gov and DoD solicitations that cite FAR 52.204-21 or DFARS 252.204-7021 and shows a Bidding Readiness Check next to the RFQ.
Open BidBoardCMMC Level 1 FastTrack
Stay eligible for DoD bids with FAR 52.204-21 handled
Level 1 is an annual self-assessment of 15 basic safeguarding practices, recorded in SPRS. It is pass/fail with no POA&Ms allowed. NTI platforms find the requirement, do the technical work, and prepare your filing.
How the ecosystem works together
Three roles, one compliance path
Does the technical work
Jackie Poole NSO
Hardens the Microsoft 365 or Google Workspace tenant, runs a device check script, and generates the System Security Plan and SPRS filing guide.
Open Jackie Poole NSOStands behind the program
Norbeck Technologies
The parent company and prime contractor. NTI provides the corporate credentials, past performance and accountability behind both platforms.
View NTI credentialsThe process
From intake to SPRS in five steps
01
Intake
Enter your CAGE code, business address and the people who handle government bids.
02
Enclave hardening
MFA, legacy sign-in disabled, 15-minute session timeouts, and spam and malware filtering on in-scope accounts.
03
Device check
A signed script confirms disk encryption, screen lock of 15 minutes or less, antivirus, patches and a non-admin daily account.
04
Documents
System Security Plan, Acceptable Use Policy and Media Sanitization Protocol mapped to all 15 Level 1 practices.
05
Officer affirmation
Step-by-step PIEE and SPRS guidance. Your company officer submits the affirmation, and a reminder is set for 11 months later.
FAR 52.204-21
The 15 basic safeguarding practices
Applies only to systems that store, process or transmit Federal Contract Information. Keep the scope small: often one machine and one mailbox.
0 of 15 in place
Progress is saved in this browser so you can come back later. Level 1 is pass/fail: all 15 must be in place before your company officer affirms in SPRS.
SPRS filing steps
Finish the checklist first. When all 15 are in place, follow these steps.
- 01Confirm your identifiers. Have your UEI (SAM.gov) and CAGE code ready, and make sure your SAM registration is active.
- 02Get PIEE access. Register at piee.eb.mil and request the SPRS Cyber Vendor User role for your company's CAGE code.
- 03Open SPRS. From PIEE, launch SPRS and go to Cyber Reports, then CMMC Assessments.
- 04Enter the Level 1 self-assessment. Select CMMC Level 1 (Self), choose the CAGE codes in scope, and record that all 15 practices are MET. Level 1 has no partial credit and no POA&Ms.
- 05Officer affirmation. Your Affirming Official, a senior officer of the company, submits the affirmation. No outside provider, including NTI, can do this for you.
- 06Save and set a reminder. Download the confirmation for your records and set a reminder about 11 months out. Level 1 must be re-affirmed every year.
Guidance only, not legal advice. Screen names in PIEE and SPRS can change; follow the current on-screen instructions.
BidBoard readiness alerts
Get notified when BidBoard flags solicitations that carry FAR 52.204-21, plus a reminder before your annual re-affirmation is due. Your checklist progress (0 of 15) is shared with the NTI team so we can follow up.
The legal boundary
No managed service provider can submit the SPRS affirmation for you. It must be made by an authorized officer of your company, under False Claims Act accountability. NTI platforms prepare the evidence and walk you through each screen; physical security and day-to-day policy enforcement stay with your team.
Level 1 must be re-affirmed every year. Contracting officers check SPRS against your CAGE code when you bid.
AI-powered readiness plan
Get a tailored Level 1 plan in about a minute
Describe your company and how you work today. Lovable AI maps your answers to the 15 practices and returns a scope, gap check and 30-day plan.
Your tailored plan appears here: recommended scope, a gap check against all 15 practices, a 30-day action plan and SPRS filing steps.
Get started
Check readiness on BidBoard, fix it with NSO
Pricing and enrollment are handled on the BidBoard and Jackie Poole NSO platforms.