On July 13, the Pentagon suspended CMMC Phase 2, pausing mandatory third-party certification requirements while the Department conducts a 60-day review of the program. The announcement created immediate questions across the defense industrial base (DIB) about what changed, what did
Pentagon’s James Mismash to Keynote CMMC CON 2026 Read More »
The suspension of CMMC Phase 2 took mandatory third-party C3PAO assessments off the table — for now. But the Pentagon’s Defense Contract Management Agency continues to conduct assessments of contractor compliance with NIST SP 800-171. In June, those assessments led
Get the legal perspective on CMMC enforcement at CMMC CON 2026 Read More »
Just 1,391 organizations held a final CMMC Level 2 certificate as of the Cyber AB’s May 2026 town hall, up 14% from the month before, with another 47 conditional certificates issued and 140 assessments still in progress. The Pentagon estimates
Learn How a CMMC Assessment Actually Unfolds at CMMC CON 2026 Read More »
If you lead a company that does business with the Pentagon, there’s a good chance someone on your IT team has mentioned CMMC to you. You may not know exactly what the acronym stands for, but you need to, because
A CEO’s Guide to CMMC: Why Your Name Is on the Line Read More »
You’ve worked hard to achieve full compliance with CMMC 2.0 by implementing the controls outlined in NIST 800-171. Now it’s time to make sure your system doesn’t decay, sliding you into a non-compliant state. In our last blog, we discussed
How to Stay CMMC-Ready After Certification: Maintaining NIST 800-171 Compliance Read More »
You’ve completed your internal assessment and scoped your environment. Now it’s time to act on all that intelligence and achieve compliance. How do you go about documenting your compliance with the requirements and making a plan to implement the remaining controls?
From Assessment to Readiness: How to Prepare for CMMC Certification Read More »
CMMC Level 2 is here, and primes are already encouraging subcontractors to comply. Success starts with understanding the roles of RPOs and C3PAOs, choosing partners wisely, and preparing with the right documentation and scope. In our webinar RPOs vs. C3PAOs: Decoding CMMC Compliance
CMMC Level 2: How to Choose the Right Partners and Get Certified Read More »
If you’re a defense contractor trying to make sense of the CMMC landscape, you’re not alone. The noise around CMMC 2.0 has been building for years, but now—post–November 10—it’s real. The Department of Defense (DOD) has officially started rolling out
Planning Your 2026 CMMC Compliance Roadmap Read More »
The cybersecurity conversation in 2025 shifted from preparation to execution. The Cybersecurity Maturity Model Certification (CMMC) program is now an enforceable requirement, and defense contractors are trying to keep up. On Nov. 10, Phase 1 of CMMC implementation began,
2025 in Review: Contractors Race to Catch Up to CMMC Requirements Read More »
If you support the Defense Industrial Base, you already know the familiar response when CMMC comes up. Someone sighs. Someone asks if the deadline moved again (it hasn’t and CMMC language will now be appearing in new DOD contracts). Someone
Still Complaining About Compliance? Attackers Love Hearing That. Read More »
