CMMC Phase II Suspended: 60-Day Review Could Shift DoD Cybersecurity Framework
The suspension of CMMC Phase II pauses mandatory third-party cybersecurity assessments, leaving contractors to rely on existing DFARS controls. A 60-day review may revise the framework. Cybersecurity professionals must ensure ongoing compliance while anticipating future changes.