JavaScript Required

Jumpseat Aerospace News requires JavaScript to function. Please enable JavaScript in your browser settings to continue.

Pentagon Suspends CMMC Phase 2 Amid Review

July 14, 2026

2 min read

Key Takeaways

Pentagon suspends CMMC Phase 2 requirements.
A 60-day review of the program is underway.
Contractors must still meet Phase 1 requirements.
New task force to recommend scaled-back security measures.

Silver membership required Upgrade to Silver to access Key Takeaways.

Upgrade

Strategic Implications

This suspension may indicate the Pentagon's willingness to adapt cybersecurity regulations to better support smaller contractors and the defense industrial base. The move could suggest a shift towards more flexible and efficient security measures, which may benefit the industry as a whole, but also raises concerns about potential security risks.

Silver membership required Upgrade to Silver to access Strategic Implications.

Upgrade

What Happened

Reevaluating Contractor Cybersecurity Rules For Defense Industry

The Pentagon has suspended the Cybersecurity Maturity Model Certification (CMMC) Phase 2 requirements, pending a 60-day review of the program. According to SecurityWeek, this move aims to clear bureaucratic obstacles and support the defense industrial base, particularly smaller manufacturers. A new task force will collect industry feedback and recommend scaled-back security measures to speed up contracting for these businesses. The CMMC is a framework for verifying that companies handling government information meet baseline cybersecurity standards.

Source | Originally Published: July 14, 2026

Companies Mentioned