
CMMC Phase 2 Is on Hold: What Defense Contractors Still Have to Do
The Pentagon suspended the CMMC Phase 2 certification requirement in July 2026 while a task force reviews the program. Self-assessments and NIST SP 800-171 obligations are still in force.






