As cited
Copy frozen at (site build).
regulatory
Industry Reactions to Pentagon Suspending CMMC Phase 2: Feedback Friday
The Department of Defense suspended the Cybersecurity Maturity Model Certification (CMMC) Phase 2 program, which paused third-party audits of defense contractors. Industry stakeholders acknowledged that while the audit moratorium is in effect, the legal requirement to protect controlled unclassified information (CUI) remains in force.
Why it matters: Defense contractors must maintain CUI protection controls and compliance posture despite the pause in formal CMMC Phase 2 audits, as the underlying obligation persists and audits may resume.
- Source published
- First seen by Cybersecurity Tracker