JavaScript Required

Jumpseat Aerospace News requires JavaScript to function. Please enable JavaScript in your browser settings to continue.

CMMC Phase 2 Suspension Update for Defense Industrial Base

August 7, 2026

1 min read

Key Takeaways

The US Department of War suspended CMMC Phase 2 requirements.
CMMC Phase 1 compliance obligations remain in effect.
DIB orgs must still safeguard covered defense information.
Prime contractors may still require CMMC Level 2 certification.

Silver membership required Upgrade to Silver to access Key Takeaways.

Upgrade

Strategic Implications

The CMMC Phase 2 suspension may indicate a shift in the DoW's approach to cybersecurity compliance, potentially signaling a more flexible or risk-based approach. This could impact the competitive landscape for DIB contractors, as those with robust cybersecurity postures may be better positioned to meet evolving requirements.

Silver membership required Upgrade to Silver to access Strategic Implications.

Upgrade

What Happened

Cyber Compliance Readiness Implications for DIB Contractors

The US Department of War has suspended the rollout of CMMC Phase 2 requirements, citing the need for a 60-day review period. This suspension puts the need for third-party CMMC Level 2 compliance audits on hold, but CMMC Phase 1 compliance obligations remain in effect. DIB contractors must still safeguard covered defense information and may still be required to meet CMMC Level 2 certification by prime contractors. The suspension was first reported by CBIZ.

Source | Originally Published: July 13, 2026

Companies Mentioned