Pentagon announces ‘immediate suspension’ of some CMMC mandates - Breaking Defense
The Pentagon has announced an immediate suspension of some CMMC mandates, delaying certain cybersecurity certification requirements for defense contractors.
Aforeworn detected this change in the Government Contracting (SAM/FAR) space on July 13, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Defense contractors, especially small businesses and those pursuing CMMC certification should confirm how it applies to their specific situation before acting. There is a time constraint attached: Immediate; monitor for further updates within 30 days.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors Government Contracting (SAM/FAR) continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
Some CMMC mandates are suspended immediately, meaning certain certification deadlines and requirements are paused.
Who it affects
Defense contractors, especially small businesses and those pursuing CMMC certification
What you must do
Review which CMMC mandates are suspended and adjust compliance timelines accordingly; continue other cybersecurity practices.
Deadline
Immediate; monitor for further updates within 30 days.
Never miss a change like this again
Aforeworn watches Government Contracting (SAM/FAR) around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in Government Contracting (SAM/FAR)
- DOD halts cybersecurity requirements for CMMC Phase 2: ‘The math just simply doesn't math’ - DefenseScoop
- Pentagon pauses cyber audit rule blamed for supplier exits - The Mighty 790 KFGO
- Forging the Arsenal of Freedom: Department of War Suspends CMMC Phase II Requirements - U.S. Department of War (.gov)
- CAS Board Publishes Final Rule Rescinding CAS 404, 408, 409, and 4117 - Government Contracts Legal Forum
- Proposed FAR Part 40 Rule: Consolidation of Supply Chain Security and Information Security Requirements and New Changes to the Rules - Inside Government Contracts