SPRS Impact Simulator
See exactly which controls move your score and by how much.
Current Estimated SPRS Score
+10
0–89 estimate
Range: -203 to +110
Open Status Entries
32
11 not implemented · 21 partial
Maximum Modeled Gain
+100
if all 32 entries are marked implemented
Projected max: 110
Select entries below to model marking them implemented; this does not validate implementation.
Projected Score:+10
Top 5 Score Scenarios
Highest modeled SPRS point value; not an effort or risk rankingAll Gaps
32 controls · sorted by impact| Select | Control | Title | Status |
|---|---|---|---|
| 3.1.2 | Transaction and Function Control | Not Implemented | |
| 3.1.12 | Control Remote Access | Partial | |
| 3.1.18 | Mobile Device Connection | Partial | |
| 3.3.5 | Audit Record Review | Partial | |
| 3.4.6 | Least Functionality | Partial | |
| 3.4.8 | Application Execution Policy | Not Implemented | |
| 3.5.10 | Cryptographically-Protected Passwords | Partial | |
| 3.7.5 | Nonlocal Maintenance | Partial | |
| 3.8.7 | Removable Media | Not Implemented | |
| 3.12.3 | Security Control Monitoring | Partial | |
| 3.13.6 | Network Communication by Exception | Partial | |
| 3.13.11 | FIPS-Validated Cryptography | Partial | |
| 3.13.15 | Communications Authenticity | Partial | |
| 3.14.3 | Security Alerts | Not Implemented | |
| 3.14.6 | Security Monitoring | Partial | |
| 3.1.5 | Least Privilege | Not Implemented | |
| 3.1.19 | Encrypt CUI on Mobile | Partial | |
| 3.7.4 | Media Inspection | Partial | |
| 3.8.8 | Shared Media | Partial | |
| 3.1.15 | Privileged Remote Access | Partial | |
| 3.3.4 | Alert in Event of Audit Failure | Partial | |
| 3.3.9 | Limit Audit Log Management | Not Implemented | |
| 3.4.3 | System Change Control | Partial | |
| 3.4.4 | Security Impact Analysis | Partial | |
| 3.5.11 | Obscure Feedback | Not Implemented | |
| 3.6.3 | Incident Response Testing | Not Implemented | |
| 3.8.6 | Portable Storage Encryption | Partial | |
| 3.10.6 | Alternative Work Sites | Partial | |
| 3.11.3 | Vulnerability Remediation | Not Implemented | |
| 3.13.7 | Split Tunneling | Not Implemented | |
| 3.13.10 | Key Management | Not Implemented | |
| 3.13.13 | Mobile Code | Partial |