The Defense Department will keep cybersecurity self-assessments, but will not require third-party certifications as planned.

Top Pentagon officials said as currently executed, CMMC is too prohibitive and burdensome on the Defense Industrial Base.

The Defense Department will keep cybersecurity self-assessments, but will not require third-party certifications as planned.