CMMC SPRS Affirmation & Executive Attestation (BR-06)

Executive attestation, SPRS affirmation management, and senior official dual-control signoff.

Basis: Attestation

1 steps5 fields~5 minUpdated 2026-10-10Specification

Record status

At a glance

Before you start: Open it: CMMC › Submit /cmmc-workflow/submit
Role: officeradmin
Finish with: Save Draft · Create affirmation
Regulatory basis: DoD Cybersecurity Maturity Model Certification (CMMC 2.0 / NIST SP 800-171)
What happens next: Sign officeradmin
Submit to SPRS officeradmin
Complete independent review officermanageradmin

1 steps, completed in order. Each step is validated against the schema before the next unlocks.

Step 1 of 1

Complete the Affirmation fields. Each value is validated against the schema before the next step unlocks.

required“optional” — may be left empty

Domain entity ID (required)
entityId
The organisation or system this record is about — lowercase with dashes, e.g. acme-corp-hq. Pick one you have used before, or type a new id to create it.
Approved scopeoptional
scopeRecordId
Enter approved scope.
Approved scope versionoptional
scopeVersion
Enter approved scope version.
Assigned affirming officialoptional
affirmingOfficialId
Enter assigned affirming official.
Required reviewersoptional
reviewerIds
Enter required reviewers.

Continue with the next guide in this framework's table of contents.

Automated NIST SSP compilation, 180-day POAM window enforcement, and SPRS score calculation.

Human-governed remediation planning, automated fix playbooks, and 180-day POAM resolution tracking.

Board-ready defensible compliance reporting, audit trail aggregation, and analytics packs.

All CMMC 2.0 guides23