Pentagon Suspends CMMC Phase 2 Implementation

The Department of War suspended Phase 2 of the Cybersecurity Maturity Model Certification program, freezing all pending milestones. A 60-day CMMC Reform Task Force will review the framework. The Pentagon cited scalability issues, noting over 100,000 contractors require audits but only roughly 100 accredited assessors exist. Existing cybersecurity obligations remain in effect.