On July 13, 2026, the Department of Defense announced the immediate suspension of CMMC Phase II, the requirement for third-party (C3PAO) assessments at Level 2, and launched a 60-day, top-to-bottom review of the entire program.
For defense contractors, the announcement raised more questions than it answered:
- Does self-assessment mean the pressure is off?
- What happens when the CMMC Reform Task Force reports back?
- What should you be doing right now?




