Clarification from Robert Metzger: I have a couple of clarifications, if you don't mind. 1) A company will have to submit the Basic Assessment only if it is "required to implement NIST SP 800-171." And the Basic Assessment will not be due until a company receives a solicitation or other contracting action which has the two new contract clauses, DFARS 252.204-7019 and -7010. 2) The methodology to conduct the Basic Assessment was updated on June 24, 2020 to version 1.2.1. (Key changes concern how to conduct a High Assessment virtually. There is also additional info on how to submit the Basic Assessment score in SPRS.) I've attached the link to the updated assessment document. www.acq.osd.mil/dpap/pdi/...