DOD halts cybersecurity requirements for CMMC Phase 2: ‘The math just simply doesn't math’ - defensescoop.com
DOD halts cybersecurity requirements for CMMC Phase 2, citing that 'the math just simply doesn't math'.
Aforeworn detected this change in the Export Controls & ITAR (DDTC / BIS / DFARS) space on July 30, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated Low urgency. Defense contractors and subcontractors subject to CMMC Phase 2 cybersecurity requirements. should confirm how it applies to their specific situation before acting. There is a time constraint attached: Not specified.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors Export Controls & ITAR (DDTC / BIS / DFARS) continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
The Department of Defense has paused the implementation of CMMC Phase 2 cybersecurity requirements.
Who it affects
Defense contractors and subcontractors subject to CMMC Phase 2 cybersecurity requirements.
What you must do
No immediate action required; monitor for future updates on CMMC Phase 2.
Deadline
Not specified.
Never miss a change like this again
Aforeworn watches Export Controls & ITAR (DDTC / BIS / DFARS) around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in Export Controls & ITAR (DDTC / BIS / DFARS)
- US Sanctions IRGC-Linked Firms Over Strait of Hormuz Transit Fees - indexbox.io
- US-CONGRESS BILLS-119s5081is: Congressional Trade Powers Reform Act of 2026
- Adoption and Procedures of the Section 232 Steel and Aluminum Tariff Inclusions Process
- Notice of Request for Public Comments on Section 232 National Security Investigation of Imports of Wind Turbines and Their Parts and Components
- In the Matter of Kamir Armando Brown Blanchard, Register Number 25223-510, FCI Atlanta, P.O. Box 150160, Atlanta, GA 30315; Order Denying Export Privileges