The average contractor SPRS score is now –12, and only about 4% of companies are fully ready for certification, signaling a widening readiness gap as supply chain accountability and regulatory deadlines accelerate.
CMMC Phase 1 enforcement is now directly affecting contract awards, with SPRS CMMC status required for eligibility and C3PAO assessment backlogs pushing into late 2026. Meanwhile, escalating threats—including actively exploited legacy vulnerabilities flagged by CISA and insider-focused ransomware tactics—underscore the urgency for contractors to accelerate readiness as the Department of Defense moves toward future adoption of NIST SP 800-171 Revision 3.
New SBIR/STTR legislation aims to make Phase III transitions clearer, faster, and more achievable by removing ambiguity around authority, competition, data rights, and agency responsibilities.
New FAR Part 19 guidance shifts 8(a) awards toward more competition, making vehicles like GSA MAS and STARS III essential pathways for growth.
New SBIR/STTR legislation strengthens Phase III authority, clarifies definitions, enhances data rights, and streamlines contracting, making transitions from research to implementation smoother.
A completed Phase I or II is not the end; it’s a legal bridge to sole-source Phase III awards with no cap, no expiration, and broad commercialization authority.
