US DoW suspends CMMC Phase II requirements for defence contractors

Loading...Weak SignalCredibility: 49%
Report Content

The US Department of War (DoW) has suspended implementation of Phase II of the Cybersecurity Maturity Model Certification (CMMC), previously due to come into force in November 2026, after concerns were raised about the burden on small defence contractors.
Classification
Analytical Domain
Strategic
Primary Category
Political-Military
SALUTE Report
Activity
Suspension of Phase II requirements for CMMC
Location
Unit
U.S. Department of War
Time
November 2026
Equipment
-
Summary

The U.S. Department of War has suspended the implementation of Phase II of the Cybersecurity Maturity Model Certification (CMMC), which was set to take effect in November 2026, due to concerns regarding the impact on small defense contractors.

Key Facts
  • The U.S. DoW has suspended Phase II of CMMC requirements.
  • The implementation was originally scheduled for November 2026.
  • Concerns were raised about the burden on small defense contractors.