What Happened
Pentagon Likely To Return To Review Regime For Contractors
The Pentagon has paused Phase II of the Cybersecurity Maturity Model Certification (CMMC) program, which requires contractors to undergo third-party assessments to ensure compliance with cybersecurity standards. Despite the pause, industry officials and experts believe that some form of review regime will likely return to ensure contractors are meeting cybersecurity requirements. The Pentagon will continue to enforce baseline cybersecurity compliance through self-assessments, but experts warn that this may leave a gap in holding contractors to those standards. The pause was announced by the Department of Defense and Small Business Administration, as reported by Breaking Defense.