JavaScript Required

Jumpseat Aerospace News requires JavaScript to function. Please enable JavaScript in your browser settings to continue.

DOD Suspends CMMC Phase 2 Amid Cost Concerns

July 14, 2026

2 min read

Key Takeaways

DOD suspends CMMC Phase 2 due to high costs for small contractors.
Phase 1 self-assessments will remain in place.
A 60-day review will study the program's future.
DOD seeks feedback on CMMC compliance costs and security controls.

Silver membership required Upgrade to Silver to access Key Takeaways.

Upgrade

Strategic Implications

This suspension may indicate a shift in DOD's approach to cybersecurity, prioritizing speed and reducing barriers for new entrants. The review could suggest a reevaluation of the program's effectiveness and potential alternatives, which may impact the defense industrial base and its ability to deliver critical capabilities.

Silver membership required Upgrade to Silver to access Strategic Implications.

Upgrade

What Happened

Defense Department Launches 60-Day Review Of Cybersecurity Program

The Defense Department has suspended the second phase of its Cybersecurity Maturity Model Certification program, citing prohibitive costs for small and mid-size contractors. The department will keep Phase 1 self-assessments in place while a new task force studies the program’s future. DOD is launching a 60-day review to ensure the program aligns with Defense Secretary Pete Hegseth’s acquisition initiatives, which prioritize speed and lowering barriers for new entrants. The decision was reported by Washington Technology.

Source | Originally Published: July 13, 2026

Companies Mentioned