A CMMC assessment is not the end of the paperwork. Under 32 CFR 170.22, a named senior leader at your company affirms, in SPRS, that you meet your CMMC level and will keep meeting it. Here is what that affirmation says and when it is due.

Who signs

The Affirming Official is the senior-level representative within your company who is responsible for ensuring compliance with CMMC requirements and has the authority to affirm your continuing compliance. Primes and subcontractors each have their own.

What the affirmation says

Each affirmation includes:

The Affirming Official's name, title and contact information- A statement that your company has implemented, and will maintain, all applicable CMMC security requirements for its CMMC status, for every information system in the assessment scopeAffirmations are entered in SPRS, and DoD checks SPRS for them.…