• •Department of War issued an official release pausing mandatory CMMC Phase II compliance for contractors.
• •The suspension removes immediate audit requirements that were previously set to trigger for select small-to-mid-sized defense firms.
• •It remains unclear how long this suspension will last or what specific audit gaps prompted the Department of War to shift its timeline.

The Department of War has officially suspended the Phase II requirements for the Cybersecurity Maturity Model Certification (CMMC) program. This move deviates from the previously aggressive deployment schedule intended to standardize security protocols across the defense industrial base. The pause creates significant friction for contractors who had already allocated budget and operational resources to meet the upcoming compliance benchmarks. Whether this suspension is a temporary administrative pivot or a signal of a broader policy restructuring remains to be seen by the contracting community.