A Aforeworn
Forewarned is forearmed.
Home › Niches › Export Controls & ITAR (DDTC / BIS / DFARS) › Change
Medium urgency

The CMMC Pause: The DoD Suspends Phase 2 Requirements - embedded.com

Detected July 17, 2026 · in Export Controls & ITAR (DDTC / BIS / DFARS)

The DoD has suspended Phase 2 of the CMMC program, delaying mandatory cybersecurity certification for defense contractors.

Aforeworn detected this change in the Export Controls & ITAR (DDTC / BIS / DFARS) space on July 17, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated Medium urgency. Defense contractors and subcontractors subject to DFARS cybersecurity requirements should confirm how it applies to their specific situation before acting. There is a time constraint attached: No immediate deadline; monitor DoD announcements for resumption.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors Export Controls & ITAR (DDTC / BIS / DFARS) continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.

What changed

The DoD paused implementation of CMMC Phase 2, which would have required third-party certification for handling CUI. Existing DFARS 252.204-7012 requirements remain in effect.

Who it affects

Defense contractors and subcontractors subject to DFARS cybersecurity requirements

What you must do

Continue to comply with current DFARS cybersecurity clauses (self-assessment) but pause preparations for third-party audits until further notice.

Deadline

No immediate deadline; monitor DoD announcements for resumption.

Source: https://news.google.com/rss/articles/CBMigwFBVV95cUxPVkFaNUVzX2t0WjI1UElUTk55OTdKVHdObGpDYzRvVWphZGRuMW5DbGdYcGY4bFFSX0JFTDAzRkp6Z1E4M0E1YlhlRGRaZDVISXowX3RZNGp4X0tnZDZWdU55cXJaUDNzT2dta2hWQjY5UVpqbkRwVGdwZVJBc0hZbnVvaw?oc=5

Never miss a change like this again

Aforeworn watches Export Controls & ITAR (DDTC / BIS / DFARS) around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.

Start your free trial

Related changes in Export Controls & ITAR (DDTC / BIS / DFARS)