Pentagon pauses cyber audit rule blamed for supplier exits - WTVB
The Pentagon has paused a cyber audit rule (likely CMMC or DFARS 252.204-7012) that was causing defense suppliers to exit the market. This pause provides temporary relief for small and medium defense contractors from immediate compliance burdens, but the underlying requirements remain in effect until further notice.
Aforeworn detected this change in the Export Controls & ITAR (DDTC / BIS / DFARS) space on July 16, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated Medium urgency. Defense manufacturers and subcontractors subject to DFARS cybersecurity clauses should confirm how it applies to their specific situation before acting. There is a time constraint attached: Ongoing; monitor for official guidance from DoD on the duration of the pause.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors Export Controls & ITAR (DDTC / BIS / DFARS) continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
The Pentagon paused enforcement or implementation of a cyber audit rule that had been blamed for supplier exits. The exact rule is not specified but likely relates to CMMC or DFARS 252.204-7012.
Who it affects
Defense manufacturers and subcontractors subject to DFARS cybersecurity clauses
What you must do
Continue to maintain existing cybersecurity compliance (e.g., NIST SP 800-171) as the pause may be temporary. Do not halt compliance efforts.
Deadline
Ongoing; monitor for official guidance from DoD on the duration of the pause.
Never miss a change like this again
Aforeworn watches Export Controls & ITAR (DDTC / BIS / DFARS) around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in Export Controls & ITAR (DDTC / BIS / DFARS)
- The $10 Million TINA Threshold Is Now in Effect: What Contractors and Subcontractors Need to Know - Inside Government Contracts
- U.S. Imposes New Sanctions on Iranian Financial Network, Targeting UAE Bank and Dubai Branch of Bank Melli - Forth.News
- US-CONGRESS HR5853: To amend the Export Control Reform Act of 2018 to increase the civil penalties that may be imposed under such Act.
- Determination: State Sponsor of Terrorism Regarding Syria; Recission
- US-CONGRESS BILLS-119hr1869rh: Protecting American Industry and Labor from International Trade Crimes Act of 2026