policy Pentagon Suspends CMMC Phase 2 as It Rethinks Contractor Cybersecurity Rules The Pentagon is delaying the second phase of the Cybersecurity Maturity Model Certification (CMMC) program, intended to streamline contractor cybersecurity rules and address a shortage of qualified third-party assessors. This pause aims to avoid hindering smaller businesses from participating in defense contracts, whil… SecurityWeek · Jul 14, 2026 Info cmmccybersecuritycontractor