Department of Defense Suspends CMMC Phase II: What You Need To Know Now - JD Supra
DoD suspends CMMC Phase II rulemaking, delaying mandatory certification for defense contractors. Existing cybersecurity requirements (DFARS 252.204-7012, NIST SP 800-171) remain in effect.
Aforeworn detected this change in the Government Contracting (SAM/FAR) space on July 16, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated Medium urgency. Defense contractors, small businesses with set-asides, GSA schedule holders, federal grant recipients handling CUI should confirm how it applies to their specific situation before acting. There is a time constraint attached: Ongoing; no new deadline imposed by this suspension.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors Government Contracting (SAM/FAR) continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
CMMC Phase II (mandatory third-party certification) is suspended; no new certification deadlines until further notice. However, self-attestation and existing DFARS/NIST 800-171 compliance obligations remain unchanged.
Who it affects
Defense contractors, small businesses with set-asides, GSA schedule holders, federal grant recipients handling CUI
What you must do
Continue maintaining NIST SP 800-171 compliance and DFARS clause adherence; do not halt cybersecurity preparations. Monitor DoD for future rulemaking.
Deadline
Ongoing; no new deadline imposed by this suspension.
Never miss a change like this again
Aforeworn watches Government Contracting (SAM/FAR) around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in Government Contracting (SAM/FAR)
- US-CONGRESS S1071: National Defense Authorization Act for Fiscal Year 2026
- Pentagon Suspends CMMC Program - CBIA
- DoD Suspends CMMC Deadlines and Seeks to Reassess Requirements - The National Law Review
- Financial Assistance Regulations: Conflict of Interest and Conflict of Commitment Policy Requirements
- NV AB2: Revises provisions relating to state purchasing.