07/14/2026
‼️ Effective immediately, the DoD announced that it is suspending the implementation of CMMC Phase 2.
Phase 1 self-assessments will remain in effect while the department conducts a 60-day review of the program. Phase 2 was scheduled to begin on November 10, 2026, and would have required third-party cybersecurity assessments for certain contractors.
The 60 day review could result in revisions, replaced requirements, or a modified certification model. If you have any questions about what this could mean for you, contact us today.
The Department of War announced the immediate suspension of the Cybersecurity Maturity Model Certification Phase II requirements, which were originally scheduled to come into effect on Nov. 10, 2026.