Pentagon Halts CMMC Phase Two, Initiates Program Review

The Pentagon announced a suspension of the second phase of the Cybersecurity Maturity Model Certification (CMMC). The pause applies to the newly required requirements for contractors. Officials said the decision follows concerns about implementation challenges. A comprehensive review of the CMMC program will be launched to assess its effectiveness. The review will consider feedback from industry and government stakeholders. Contractors currently pursuing certification may need to adjust timelines. The move could affect defense supply chain security compliance. The Pentagon will release findings and any revised guidance in the coming months.