DoW Suspends CMMC Phase II — NIST SP 800-171 Self-Assessment Becomes the Interim Standard, With Rising False Claims Act Exposure - Hunton Andrews Kurth LLP
DoD suspends CMMC Phase II, making NIST SP 800-171 self-assessment the interim standard, with increased False Claims Act exposure for non-compliance.
Aforeworn detected this change in the Export Controls & ITAR (DDTC / BIS / DFARS) space on July 19, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Defense contractors and subcontractors subject to DFARS clause 252.204-7012 should confirm how it applies to their specific situation before acting. There is a time constraint attached: Immediately; self-assessment must be current for any new contract or option period.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors Export Controls & ITAR (DDTC / BIS / DFARS) continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
CMMC Phase II is suspended; self-assessment against NIST SP 800-171 is now required, and failure to accurately self-attest may trigger False Claims Act liability.
Who it affects
Defense contractors and subcontractors subject to DFARS clause 252.204-7012
What you must do
Conduct a thorough NIST SP 800-171 self-assessment and ensure all security controls are implemented and documented accurately.
Deadline
Immediately; self-assessment must be current for any new contract or option period.
Never miss a change like this again
Aforeworn watches Export Controls & ITAR (DDTC / BIS / DFARS) around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in Export Controls & ITAR (DDTC / BIS / DFARS)
- US-CONGRESS S1071: National Defense Authorization Act for Fiscal Year 2026
- Notice of Department of State Sanctions Action
- The CMMC Pause: The DoD Suspends Phase 2 Requirements - embedded.com
- Department of War Pauses CMMC Phase II Implementation & Launches 60-Day Program Review - Steptoe
- Sanctions on Sudan under the Chemical and Biological Weapons Control and Warfare Elimination Act