Pentagon Suspends CMMC Phase 2 Implementation

The Department of War suspended CMMC Phase II implementation, establishing a 60-day task force to redesign the certification framework. New procurements are limited to Level 1 and Level 2 self-assessments during the review. Existing cybersecurity obligations, including NIST 800-171 and DFARS clauses, remain fully in effect.