JavaScript Required

Jumpseat Aerospace News requires JavaScript to function. Please enable JavaScript in your browser settings to continue.

Pentagon Suspends CMMC Phase II Requirements

July 13, 2026

2 min read

Key Takeaways

Pentagon suspends CMMC Phase II requirements.
Suspension aims to reduce bureaucratic burdens on defense firms.
Third-party assessments and audits are halted.
Baseline cybersecurity compliance will continue through NIST standards.

Silver membership required Upgrade to Silver to access Key Takeaways.

Upgrade

Strategic Implications

This suspension may indicate the Pentagon's recognition of the need to balance cybersecurity with the operational efficiency of defense firms, particularly smaller ones. The move could suggest a shift towards more flexible and adaptable cybersecurity measures, which may benefit the defense industrial base's growth and innovation.

Silver membership required Upgrade to Silver to access Strategic Implications.

Upgrade

What Happened

Defense Department Eases Cybersecurity Burden On Industry

The Pentagon has announced the immediate suspension of the Cybersecurity Maturity Model Certification (CMMC) Phase II requirements, citing the need to reduce bureaucratic burdens on defense firms. The suspension aims to ease the compliance process for smaller companies, while maintaining baseline cybersecurity standards through NIST guidelines. The decision was made to support the secretary of defense’s directive to enhance warfighter readiness and promote industrial base growth. The suspension was first reported by Breaking Defense.

Source | Originally Published: July 13, 2026

Companies Mentioned