The Defense Department will keep cybersecurity self-assessments, but will not require third-party certifications as planned.
Gettyimages.com/tadamichi
By Nick Wakeman
Editor-in-Chief, Washington Technology
July 13, 2026 04:51 PM ET
Cyber
The Pentagon Just Paused Its Cybersecurity Certification Program. Here's What Everyone Is Missing.
DOD suspends CMMC Phase 2, launches 60-day ‘reform’ review
Pentagon Suspends CMMC Phase 2 as It Rethinks Contractor Cybersecurity Rules
Industry Reactions to Pentagon Suspending CMMC Phase 2: Feedback Friday
Pentagon pauses cyber audit rule blamed for supplier exits
CMMC may be paused, but cybersecurity audits likely to return: Industry, experts - Breaking Defense
Pentagon pauses the cyber audit rule that was pushing small suppliers out
MSPAlliance Applauds Department of Defense Suspension of CMMC Phase II, Calls for Smarter Cybersecurity Reform
Pentagon announces 'immediate suspension' of CMMC mandates - Breaking Defense
The CMMC Pause is Not a Pass: What Defense Contractors Should Do Now
The Pentagon paused CMMC Phase II, but cybersecurity requirements remain. Here's what the decision really means for defense…
Citing prohibitive costs for small and mid-size contractors, the Defense Department will keep Phase I self-assessments in place…
The Pentagon is suspending CMMC phase two requirements that were set to take effect in November, pending a review of the entire…
Cybersecurity industry experts comment on the Pentagon suspending phase 2 of the CMMC until a review is completed.
WASHINGTON, July 13 : The Pentagon is suspending the next phase of a cybersecurity certification program for defense contractors,…
The CMMC Phase II pause “shouldn’t be a shocker to anybody,” according to Katie Arrington, thought of as the creator of CMMC.…
