Department of War Suspends CMMC Phase II Requirements

The Department of War announced a suspension of CMMC Phase II requirements. The decision halts enforcement of the second phase of the Cybersecurity Maturity Model Certification. Contractors who were preparing for compliance are given additional time. The suspension applies to all defense contracts under the department’s authority. Officials said the pause allows a reassessment of implementation timelines. No new compliance deadline was provided in the announcement. The change may impact budgeting and security planning for affected firms. Stakeholders are urged to watch for future guidance on reinstating the requirements.