An internal evaluation performed by contractors to measure compliance with NIST SP 800-171 requirements and, in some cases, CMMC Level 1. Self-assessments are scored using the DoD’s Supplier Performance Risk System (SPRS), where contractors submit their results. While self-assessments provide a baseline, only third-party or government assessments can validate certification for contracts requiring CMMC Level 2 or higher.