On July 13, 2026, the Department of War (DOW) announced the immediate suspension of Cybersecurity Maturity Model Certification (CMMC) Phase II implementation while it conducts a 60-day review of the program. Contractors that anticipated imminent third-party assessment requirements will understandably view the announcement as welcome relief.
| less than a minute read
Department of War Suspends CMMC Phase II: Key Implications for Defense Contractors

/Passle/684aaaec517046949f040d52/MediaLibrary/Images/2026-05-19-18-04-07-044-6a0ca61762582ca8860f49e0.jpg)
/Passle/684aaaec517046949f040d52/MediaLibrary/Images/2026-07-15-15-40-39-554-6a57a9f7200f7fa481c5c39a.jpg)
/Passle/MediaLibrary/Images/2025-09-22-10-35-40-347-68d1267c4212553ec5d659b9.jpg)
/Passle/684aaaec517046949f040d52/MediaLibrary/Images/2025-09-22-10-45-01-732-68d128ad4212553ec5d66575.jpg)