Pentagon Suspends CMMC Phase 2 Requirements and Launches Review of Cybersecurity Certification Program - wilmerhale.com
The Pentagon has suspended CMMC Phase 2 requirements and initiated a review of the cybersecurity certification program, signaling a potential easing of compliance burdens for defense contractors.
Aforeworn detected this change in the Government Contracting (SAM/FAR) space on August 13, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated Medium urgency. Defense contractors and subcontractors subject to CMMC requirements, especially those preparing for Phase 2 certification. should confirm how it applies to their specific situation before acting. There is a time constraint attached: Not specified; suspension is in effect until the review concludes.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors Government Contracting (SAM/FAR) continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
CMMC Phase 2 requirements are suspended while the program undergoes review; no new certifications are required at this time.
Who it affects
Defense contractors and subcontractors subject to CMMC requirements, especially those preparing for Phase 2 certification.
What you must do
Monitor official DoD announcements for updates on the review and any revised CMMC timelines or requirements.
Deadline
Not specified; suspension is in effect until the review concludes.
Never miss a change like this again
Aforeworn watches Government Contracting (SAM/FAR) around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in Government Contracting (SAM/FAR)
- What Is a Small Business? The SBA Office of Hearings and Appeals Rejects the Bid Solve Standard - arnoldporter.com
- SBA Finalizes Rule Regarding Social Disadvantage Requirements for Individually-Owned 8(a) Applicants - JD Supra
- Embedding E-Verify into Federal Funding: Where Immigration and Grant Compliance Converge - Seyfarth Shaw
- War Department Changes Cybersecurity Maturity Model Certification Requirements - war.gov
- DoW Hits Pause on Cyber Certifications: What Companies Need to Know Now - JD Supra