Call us now:
The latest challenge to beset the CMMC program came from the United States Department of War and the suspension of Phase II of the CMMC program. But not the program’s suspension. The DoW has made a decision to pause the CMMC certification requirements that were due to be phased in from November 2026 and remove CMMC Level 2 C3PAO and DIBCAC requirements from contracts.
What does this mean in practice? The DoW has stated that compliance with DFARS 252.204-7012 and NIST SP 800-171 does not change, Phase 1 continues and DIB contractors are required to continue to comply with Self-Assessment, a requirement that has been in place since 2016.
Compliance with CMMC by the international DIB has always been an issue, as has putting in place the necessary infrastructure to ensure CMMC compliance. Clearly, the DoW sees certification of compliance as a significant overhead.
What does this mean for the DoW and DIB. Cybersecurity is a critical requirement for the protection of US weapon systema and the protection of the war fighter. As we noted in the Augusta Plan and presented to the DoD back in 2021, the DoW has the tools to evaluate and enforce compliance; it just needs to put them into practice.
@Thaddeus Dziekanowski Brian D. McCarthy
@Parava Security Solutions
#cybersecurity #cmmc #dfars
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7482683101295513601