Department of War Suspends CMMC Phase II Requirements, but Cybersecurity Obligations Remain - Morgan Lewis
The Department of War has suspended CMMC Phase II requirements, but existing cybersecurity obligations under DFARS and NIST SP 800-171 remain in effect. Contractors must continue to comply with current cybersecurity clauses.
Aforeworn detected this change in the Government Contracting (SAM/FAR) space on July 16, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated Medium urgency. Defense contractors, small businesses with set-asides, GSA schedule holders, federal grant recipients should confirm how it applies to their specific situation before acting. There is a time constraint attached: Ongoing; no new deadline from this change.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors Government Contracting (SAM/FAR) continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
CMMC Phase II requirements are suspended, but all other cybersecurity obligations (e.g., DFARS 252.204-7012, NIST SP 800-171) remain unchanged.
Who it affects
Defense contractors, small businesses with set-asides, GSA schedule holders, federal grant recipients
What you must do
Continue to maintain compliance with existing cybersecurity requirements; do not relax security measures. Monitor for future updates on CMMC.
Deadline
Ongoing; no new deadline from this change.
Never miss a change like this again
Aforeworn watches Government Contracting (SAM/FAR) around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in Government Contracting (SAM/FAR)
- US-CONGRESS HR4123: FIT Procurement Act
- Years in the Making, Suspended in a Day: DoD/W Halts CMMC Phase II but Keeps Baseline Cybersecurity Obligations - regulatoryoversight.com
- KS Sub Bill for SB9: House Substitute for SB 9 by Committee on Commerce, Labor and Economic Development - Prohibiting foreign principals from acquiring interests in real estate in proximity to military installations, state agencies and local government from purchasing drones or critical components of drones from foreign principals or that are manufactured in countries of concern and foreign principals from receiving b
- FAR Council Proposes Revised CUI Safeguarding and Incident-Reporting Framework, While DoW Pauses CMMC Implementation - Mayer Brown
- US-CONGRESS BILLS-119hr8469pcs: An Act Making appropriations for military construction, the Department of Veterans Affairs, and related agencies for the fiscal year ending September 30, 2027, and for other purposes.