Records Disposition Schedule Memorandum

DEPARTMENT OF DEFENSE
WASHINGTON HEADQUARTERS SERVICES
1155 Defense Pentagon
Washington, DC 20301-1155

EXECUTIVE SERVICES DIRECTORATE

9 Oct 2024
MEMORANDUM FOR THE RECORD
SUBJ: Request for Records Disposition Authority (SF-115), Office of the Under Secretary of Defense
for Acquisition and Sustainment, OUSD (A&S), Defense Pricing, Contracting, and Acquisition Policy
(DPCAP) Contracting eBusiness (CeB),
ENCL: (1) Records Disposition Schedule for the Supplier Performance Risk System (SPRS)
SPRS is a web accessible database providing the DoD Acquisition community with an authoritative
source to retrieve supplier and product performance information (PI) assessments for the Defense
acquisition community to use in identifying, assessing, and monitoring unclassified performances. Naval
Sea Logistics Center, Department of the Navy, serves as the DoD Executive Agent for SPRS per DoD
5101.001
Enclosure (1) is the Records Disposition Schedule for SPRS. OUSD A&S Records Manager, the SPRS
Program Management Officer, and OSD Records Manager reviewed the site and content concluding the
record content of this system would be covered by the following National Archives and Records
Administration, General Records Schedule, 3.2: Information Systems Security Records, Item 010.
Systems and data security records
The disposition authority (see enclosure) was drafted in conjunction with OUSD A&S Records
Manager, the SPRS Program Management Officer to ensure the retention meets the operational needs of
the organizations and approved on 4 October 2024. OUSD A&S and NAVSEALOGCEN is reminded
that records dispositions authorities cited in the enclosure are mandatory per the 44 USC Chapter 3301
and must be incorporated into the lifecycle of the system per 36 CFR 1236, DoD 5015.02, and AI-15
“OSD Records and Information Management Program”.
The disposition will be included in next update of OSD Records Disposition Schedules and posted to
the WHS/RDD website (www.esd.whs.mil/RIM). If there are any questions, please contact me at
[email protected] or 571-372-0473.
Digitally signed by

MCCULLY.RONALD MCCULLY.RONALD.R.JR.1173976
.R.JR.1173976310 310
Date: 2024.10.09 15:43:11 -04'00'

Ronald R. McCully
OSD Records Manager

Encl:
As stated
Copy to:
Federal Records Officer for Department of Navy
Component Records Manager for OUSD A&S

Records Disposition Schedule with National Archives and Records Administration (NARA):
ASSIGNED OSD PRINCIPAL STAFF ASSISTANT (PSA):
Office of the Under Secretary of Defense For Acquisition and Sustainment, OUSD (A&S), Assistant Secretary
of Defense for Acquisition, (ASD(A)), Defense Pricing, Contracting, And Acquisition Policy
ASSIGNED DOD EXECUTIVE AGENT (DOD EA):
Department of the Navy, Naval Sea Systems Command (NAVSEA), Naval Sea Logistics Center
(NAVSEALOGCEN)
BACKGROUND:
The United States Department of Defense (DoD) is an executive branch department of the federal government
charged with coordinating and supervising all agencies and functions of the government directly related to
national security and the United States Armed Forces.
UNDER SECRETARY OF DEFENSE FOR ACQUISITION AND SUSTAINMENT (USD(A&S)):
The USD(A&S) is the PSA and advisor to the Secretary of Defense for all matters relating to acquisition and
sustainment in the DoD, including the DoD Acquisition System; system design and development; production;
logistics and distribution; installation maintenance, management, and resilience; military construction;
procurement of goods and services; materiel readiness; maintenance; environment and energy resilience
(including renewable energy, as appropriate); utilities, renewable energy, and energy management; business
management modernization; document services; nuclear, chemical, and biological defense programs; nuclear
command, control, and communications; and related matters.
Naval Sea Logistics Center (NAVSEALOGCEN) is the DoD Executive Agent for SPRS, DoD Instruction
5000.79, and provides integrated logistics, engineering, and information technology expertise to Naval Sea
Systems Command (NAVSEA), the Department of the Navy (DON), the Office of the Secretary of Defense
(OSD), and Federal agencies.
SYSTEM TITLE: Supplier Performance Risk System (SPRS)
PURPOSE: To provide the DoD and supported Federal Agencies with an authoritative source to retrieve
contractors and subcontractors’ performance information (PI) assessments for the Defense acquisition
community to use in identifying, assessing, and monitoring cyber and information security performances
ITEM 1
FILE TITLE: Supplier Performance Risk System (SPRS)
FILE DESCRIPTION: Supplier Performance Risk System (SPRS) is a multifaceted online database used to
store and access NIST SP 800-171 Performance Information (PI) self-assessments created by contractors and
subcontractors, or DoD (PI) assessments conducted in accordance with “NIST SP 800-171 DoD Assessment
per Defense Federal Acquisition Regulation Supplement (DFARS) and DoD policy. PI assessments are the
examination of a Contractor’s system security plan to confirm implementation of DoD and NIST security
requirements in the areas including but not limited to audit and accountability policy and procedures; training
and awareness policy and procedures; and user identification, authentication, and re-authentication.
DISPOSITION: Temporary. Destroy when no longer needed for agency/IT administrative purposes to
ensure a continuity of security controls throughout the life of the system.
AUTHORITY: GRS 3.2, item 010 (DAA-GRS-2013-0006-0001)
PRIVACY ACT: Not applicable

2