What Happened
Compliance Requirement Suspended Amid Industry Pressure
The Pentagon has suspended the next phase of its cyber security certification program for defense contractors, citing concerns over the compliance costs and potential impact on small and mid-sized suppliers. The move follows months of complaints from industry executives, who warned that the costs of compliance were pushing some companies out of military work. The Pentagon will now require only Level 1 or Level 2 self-assessments, rather than the third-party audits that were previously mandated. The decision was reported by iTnews.