By Josh von Rueden Senior Director, Cybersecurity and Risk Management July 17, 2026 On Monday, July 13, the Department of Defense placed an immediate freeze on CMMC Phase 2, the third-party assessment requirement that was set to take effect this November. A newly formed task force will review the entire program and report back within
On September 10, 2025, the Department of Defense (DoD) published the final Acquisition Rule (DFARS Case 2019-D041) in the Federal Register, officially tying the Cybersecurity Maturity Model Certification (CMMC) to DoD contracts. This rule goes into effect on November 10, 2025—a major milestone in cybersecurity regulation that will impact every contractor and subcontractor working with
CMMC 2.0 arose from two urgent pressures – an escalating volume of defense-sector cyber incidents and contractor feedback that the original framework felt too complex to implement at scale. The Department of Defense streamlined the model, aligning the core requirements with NIST SP 800-171 and introducing a tiered assessment path that reduces cost for lower-risk
The Cybersecurity Maturity Model Certification (CMMC) is now a critical requirement for businesses working with the Department of Defense (DoD). With cyber threats on the rise, the DoD has tightened security mandates, making compliance essential for contractors handling Controlled Unclassified Information (CUI). However, achieving and maintaining CMMC compliance is complex, with evolving regulations and rigorous
Government contractors face unique challenges in meeting the stringent requirements necessary to protect sensitive information from cybersecurity threats. As technologies such as AI and machine learning enable increasingly sophisticated cyberattacks, defense contractors must adopt advanced strategies to safeguard their systems and maintain compliance with the Department of Defense’s (DoD) standards. The Cybersecurity Maturity Model Certification
In today’s increasingly interconnected era, global threats and adversaries continue to assault the Department of Defense (DoD) and Defense Industrial Base (DIB) ecosystem. To meet these increasingly frequent and complex cyber attacks, the Department of Defense (DoD) is enhancing the protection of controlled unclassified information (CUI) and federal contract information (FCI) shared within the DIB
The Role of SPRS Scores in CMMC Compliance For companies engaging with the Department of Defense (DoD), adherence to the Cybersecurity Maturity Model Certification (CMMC) framework ensures alignment with the DoD’s information security standards as the Defense Industrial Base (DIB) continues to be the target of more frequent and complex cyberattacks. CMMC 2.0 introduced the
In today’s defense contracting landscape, the Cybersecurity Maturity Model Certification (CMMC) 2.0 stands as a critical element for companies engaged with the U.S. Department of Defense (DoD) with forthcoming enforcement through the Defense Federal Acquisition Regulation Supplement (DFARS). This guide offers an overview of the CMMC 2.0 framework, helping businesses understand its importance, navigate its
Cybersecurity has become a paramount concern for businesses of all sizes and industries. According to IBM, the global average cost of a data breach is $4.45 million, a 15% increase over 3 years. In addition, it is estimated that 560,000 new pieces of malware are detected every day and that there are now more than
Cybersecurity is a top concern for businesses in every sector, as cyberattacks have dramatically increased in recent years. The number of attacks targeting businesses rose 50% in 2021 alone. Government and military organizations––and their contractors––rank among the most targeted industries. This has driven the Department of Defense (DoD) to expand cybersecurity standards for its contractors,
