Annual affirmation · 2026 cycle

2026 Annual affirmation package

Clarification open
Print packageDownload PDF
Review the factual basis, unresolved items, and consequence of each decision before recording the annual affirmation.

Executive summary

The package separates calculated readiness from the official affirmation submission that happens outside the product.

Recommendation

Return for clarification unless the control owner declaration is resolved before the decision meeting.

2026-07-1520 days remaining

Decision package target · Organization lead time

Explain rule

This internal target gives the Affirming Official time to review declarations before any official submission occurs outside Continuity.

Date basis
Internal decision meeting target set for 2026-07-15.
Formula
Use organization lead time before the external affirmation window.
Rule pack
Continuity planning rule · 2026.06.0
Sources
Affirmation cycle plan; Organization deadline preferences
2026-10-15112 days remaining

Annual affirmation window · Recorded status date basis

Explain rule

The annual affirmation date is a planning aid. The official SPRS affirmation submission is recorded separately with receipt provenance.

Date basis
Latest qualifying affirmation date recorded as 2025-10-15.
Formula
Add one calendar year to the latest qualifying affirmation date.
Rule pack
2026.06.0
Sources
32 CFR part 170; 48 CFR DFARS CMMC acquisition rule

Readiness trail

Source dates and declarations remain visible next to the decision target.

  1. Cycle opened

    Rule pack created annual affirmation package.

    Continuity rule pack

  2. Owner declarations reviewed

    Four complete; one returned for clarification.

    Program manager

  3. Affirming Official decision target

    Decision package should be ready for approval or return.

    A. Reyes

Declarations and open issues

Unresolved critical items are prominent but do not silently block a decision unless a configured policy says so.

Owner declarations and exceptions
AreaOwnerStateDecision impact
Access review and account removalJamal ColemanDeclared completeIncluded in package
Supplier responsibility updateMira PatelClarification requestedNeeds owner response
Recurring vulnerability reviewSecurity operationsException disclosedDisclose in rationale

Change, contract, and scope confirmation

The package shows what changed, which contracts rely on the scope, and whether the credential basis still matches the assessed condition.

Confirmation records
RecordLatest sourceReviewerState
Scope v3 remains currentProgram owner review · Jun 21Mira PatelConfirmed
Contract mappingContracts review · Jun 24Contracts managerConfirmed
Supplier responsibility changeChange review · Jun 25Jamal ColemanClarification open

Decision panel

Recording an internal decision does not mark official submission complete.

Record annual affirmation decision

Annual affirmation package · generated 2026-06-25

The credential and scope basis are present. One supplier responsibility declaration remains unresolved and one operations exception must be disclosed.

Unresolved items

  • Supplier responsibility declaration needs clarification.
  • Operations exception requires explicit rationale.

Generated package and submission receipt

Official submission is an external fact. An authorized user records submission date, receipt, source, and verifier after it happens.

FieldValue
Included dataCredential, scope, declarations, changes, exceptions
Snapshot hash9711c80dd8a39304376425c3255b566f32779d0afeab086afe4989bdeba250a0
Package checksumcd570fdc3413d0171cac249019970cb292b3f4e64858f29004ee907d5b8bd191
Generation stateDraft package
Submission stateNot submitted outside the product
Receipt referenceWaiting for authorized user entry
VerifierNot recorded