Pentagon Suspends CMMC Phase 2 as It Rethinks Contractor Cybersecurity Rules

The Pentagon has suspended the second phase of its Cybersecurity Maturity Model Certification program. A task force has been established to conduct a thorough review of the program as part of the Pentagon's reevaluation of its contractor cybersecurity rules. This move indicates a shift in the Pentagon's approach to regulating contractor cybersecurity. The review is intended to be comprehensive, suggesting a significant examination of the current program. The suspension of phase 2 will likely impact the rollout of the program. The task force's review will inform the Pentagon's future decisions on contractor cybersecurity rules.