On July 13, 2026, the Department of Defense announced an immediate suspension of CMMC Phase II requirements, which had been scheduled to begin November 10, 2026.
The pause primarily stops the planned expansion of mandatory third-party and government-led certification assessments while the Department conducts a top-to-bottom review of the program. Phase I self-assessment requirements remain in place, along with the underlying obligation to protect federal contract information and controlled unclassified information.
What Has Actually Been Paused?
During the suspension, contracting teams are directed to use CMMC Level 1 or Level 2 requirements. They may not designate Level 2 C3PAO or Level 3 DIBCAC assessments, and active solicitations containing those requirements are expected to be amended. Existing contracts should have those requirements removed by modification.
The Department also created a reform task force and announced a 60-day review focused on reducing cost, complexity, assessment-capacity constraints, and barriers facing small and nontraditional companies.
Why the Pause Matters to Small Businesses
Third-party certification can demand substantial time, specialized help, technology investment, and documentation. The Department said the current approach was creating prohibitive burdens, limiting assessment capacity, and pushing some smaller suppliers away from defense work. The suspension gives policymakers room to simplify the program without abandoning the security outcome.
For owners, the key distinction is between certification readiness and cybersecurity readiness. The certification timetable has changed. The risks to your systems, contract eligibility, customer relationships, and reputation have not.
The Bottom Line
The CMMC pause is a chance to trade deadline-driven spending for disciplined, risk-based preparation. Small businesses should use the time to understand their data, close meaningful security gaps, keep self-assessments supportable, and stay alert for the redesigned program. The strongest position is to remain contract-ready, customer-ready, and secure, without overspending on a certification milestone that is currently suspended.
The JetCo Solutions Team
The JetCo Solutions team is determined. We only win if you win, and we want you to succeed at every step of the government contracting process.
