Years in the Making, Suspended in a Day: DoD/W Halts CMMC Phase II but Keeps Baseline Cybersecurity Obligations - regulatoryoversight.com
DoD halts CMMC Phase II rulemaking but maintains existing cybersecurity obligations under DFARS 252.204-7012 and NIST SP 800-171. Contractors must continue to meet current requirements.
Aforeworn detected this change in the Government Contracting (SAM/FAR) space on July 16, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Defense contractors, small businesses with set-asides, GSA schedule holders, federal grant recipients should confirm how it applies to their specific situation before acting. There is a time constraint attached: Ongoing; no new deadline from this change.. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors Government Contracting (SAM/FAR) continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
CMMC Phase II rulemaking is suspended indefinitely; however, existing DFARS cybersecurity clauses and NIST 800-171 compliance obligations remain in effect.
Who it affects
Defense contractors, small businesses with set-asides, GSA schedule holders, federal grant recipients
What you must do
Continue to comply with current DFARS 252.204-7012 and NIST SP 800-171 requirements; do not relax cybersecurity posture.
Deadline
Ongoing; no new deadline from this change.
Never miss a change like this again
Aforeworn watches Government Contracting (SAM/FAR) around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in Government Contracting (SAM/FAR)
- US-CONGRESS HR4123: FIT Procurement Act
- Department of War Suspends CMMC Phase II Requirements, but Cybersecurity Obligations Remain - Morgan Lewis
- KS Sub Bill for SB9: House Substitute for SB 9 by Committee on Commerce, Labor and Economic Development - Prohibiting foreign principals from acquiring interests in real estate in proximity to military installations, state agencies and local government from purchasing drones or critical components of drones from foreign principals or that are manufactured in countries of concern and foreign principals from receiving b
- FAR Council Proposes Revised CUI Safeguarding and Incident-Reporting Framework, While DoW Pauses CMMC Implementation - Mayer Brown
- US-CONGRESS BILLS-119hr8469pcs: An Act Making appropriations for military construction, the Department of Veterans Affairs, and related agencies for the fiscal year ending September 30, 2027, and for other purposes.