Get tomorrow's brief in your inbox
Today: A Reddit thread clarifies SPRS visibility rules for primes (they cannot see supplier scores directly and must request them), DoJ announced 16 election-crime charges unrelated to defense contracting, and the Army announced a 2027 supply-chain stress test it calls a "manufacturing rodeo."
Primes cannot see supplier SPRS scores directly; they must request them. A software engineer on r/CMMC asked whether prime contractors can view a subcontractor's SPRS score or must ask the supplier to share it. The correct answer: SPRS scores are visible only to the entity that submitted them and to the contracting officer. A prime awarding a subcontract that involves CUI must obtain the supplier's current SPRS score directly from the supplier (typically as part of the proposal or flow-down compliance package), then verify with the contracting officer or require the supplier to provide a screenshot or export. DFARS 252.204-7020 obligates primes to flow down 252.204-7012 to subs handling CUI and to confirm a current assessment exists in SPRS, but the system does not grant primes blanket visibility into supplier scores. Action: If you are a prime, update your subcontractor onboarding checklist to explicitly request the supplier's SPRS score and date of last submission. If you are a supplier, prepare to share your score on request; refusal to provide it will block your ability to win CUI-bearing subcontracts.
Army announces "manufacturing rodeo" supply-chain stress test for early 2027. Acting Army Secretary Adam Telle announced at the AUSA conference that the Army will run a supply-chain stress test early next year to identify weak links in the defense industrial base. Telle called the initiative a "race" between companies and said the goal is to "strain" both the Army's organic industrial base and the broader commercial supplier network, then iterate on the failures. The announcement frames the effort around scaling technology on demand and moving the industrial base to a "wartime footing," but provided no details on scope, participation criteria, or whether cybersecurity resilience (CMMC, supply-chain risk) will be part of the evaluation. Action: If you supply hardware, software, or components to Army programs, expect solicitations or industry-day announcements in Q1 2027 describing participation criteria. This may become a forcing function for supply-chain transparency and could accelerate CMMC or NIST 800-161 (supply-chain risk management) requirements in Army contracts. Monitor Army acquisition announcements and SAM.gov for related RFIs or prototype other transaction authority (OTA) solicitations.
SPRS score visibility remains a common point of confusion. The Reddit question about whether primes can see supplier SPRS scores reflects a persistent gap in how the CMMC ecosystem communicates SPRS mechanics. Many suppliers assume their score is publicly visible or that primes can check SPRS directly during due diligence. In reality, SPRS is a submission system, not a public registry. Only the submitting entity and the government contracting officer have access to a given supplier's score. This creates friction during subcontract negotiations, especially when suppliers are reluctant to share scores below the 110-point threshold or when their last submission is stale. Takeaway: If you advise contractors, emphasize that SPRS score requests are standard and non-negotiable for CUI subcontracts. If a supplier refuses to provide a current score, the prime cannot award the subcontract without violating DFARS 252.204-7020. Conversely, if you are a supplier, treat your SPRS score as a qualification document and keep it current; a score older than three years or a refusal to share it will disqualify you from CUI work.