Department of War Pauses CMMC Phase II Implementation & Launches 60-Day Program Review - Steptoe
The Department of War has paused CMMC Phase II implementation and launched a 60-day program review, creating uncertainty for defense contractors. This may delay compliance deadlines and change requirements.
Aforeworn detected this change in the Export Controls & ITAR (DDTC / BIS / DFARS) space on July 17, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Defense manufacturers and contractors subject to DFARS/CMMC requirements should confirm how it applies to their specific situation before acting. There is a time constraint attached: 60 days from announcement (review period); no immediate compliance deadline change yet.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors Export Controls & ITAR (DDTC / BIS / DFARS) continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
CMMC Phase II implementation is paused; a 60-day review is underway to reassess the program.
Who it affects
Defense manufacturers and contractors subject to DFARS/CMMC requirements
What you must do
Monitor the review outcomes and pause any new CMMC certification investments until clarity emerges.
Deadline
60 days from announcement (review period); no immediate compliance deadline change yet.
Never miss a change like this again
Aforeworn watches Export Controls & ITAR (DDTC / BIS / DFARS) around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in Export Controls & ITAR (DDTC / BIS / DFARS)
- Sanctions on Sudan under the Chemical and Biological Weapons Control and Warfare Elimination Act
- US-CONGRESS BILLS-119s4784rs: National Defense Authorization Act for Fiscal Year 2027
- Department of War Suspends CMMC Phase II Requirements, but Cybersecurity Obligations Remain - Morgan Lewis
- US-CONGRESS S2904: SHADOW Fleet Sanctions Act of 2026
- New law barring DoD contractors from retaining certain outside consultants goes into effect - Federal News Network