A Aforeworn
Forewarned is forearmed.
Home › Niches › Export Controls & ITAR (DDTC / BIS / DFARS) › Change
High urgency

Department of Defense Suspends CMMC Phase II: What You Need To Know Now - JD Supra

Detected July 16, 2026 · in Export Controls & ITAR (DDTC / BIS / DFARS)

DoD suspends CMMC Phase II rulemaking, delaying mandatory cybersecurity certification for defense contractors.

Aforeworn detected this change in the Export Controls & ITAR (DDTC / BIS / DFARS) space on July 16, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Defense manufacturers and contractors subject to DFARS cybersecurity requirements should confirm how it applies to their specific situation before acting. There is a time constraint attached: Ongoing; no new deadline for CMMC Phase II until further notice. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors Export Controls & ITAR (DDTC / BIS / DFARS) continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.

What changed

The Department of Defense has suspended the rulemaking process for CMMC Phase II, which would have required third-party certification for handling CUI. This delays mandatory compliance but does not eliminate existing DFARS 252.204-7012 self-assessment obligations.

Who it affects

Defense manufacturers and contractors subject to DFARS cybersecurity requirements

What you must do

Continue to comply with current DFARS 252.204-7012 self-assessment and NIST SP 800-171 requirements; do not halt cybersecurity preparations.

Deadline

Ongoing; no new deadline for CMMC Phase II until further notice

Source: https://news.google.com/rss/articles/CBMihAFBVV95cUxNVmwyR0FQRHJldnhPTnBpZXNPelNJancwSm9jdG5UNVNYNC0yb1hJdnNiZ2l3Yms0a0VWdEc4QmFjZGlfMXRXT2c5S3JmbzZQUGlGd0t2NExuNUg1blBBQzN1RXZ4UDI4VHNLYjFvNUV2UzdwUkRGR3QwQzZ2S2RHNEF6aUg?oc=5

Never miss a change like this again

Aforeworn watches Export Controls & ITAR (DDTC / BIS / DFARS) around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.

Start your free trial

Related changes in Export Controls & ITAR (DDTC / BIS / DFARS)