Department of War Suspends CMMC Phase II: Key Implications for Defense Contractors

On July 13, 2026, the Department of War (DOW) announced the immediate suspension of Cybersecurity Maturity Model Certification (CMMC) Phase II implementation while it conducts a 60-day review of the program. Contractors that anticipated imminent third-party assessment requirements will understandably view the announcement as welcome relief.

However, the significance of the decision extends beyond delaying certification deadlines. It signals a broader reassessment of how DOW intends to balance cybersecurity assurance, acquisition efficiency, and industrial base participation. While the immediate compliance burden has eased for many contractors, the underlying cybersecurity obligation, and the legal risks associated with contractor self-representations, remain.

Read the full article at Dentons.com

Subscribe and stay updated

Receive our latest blog posts by email.

Stay in Touch

CMMC, Cybersecurity, DOW

About Phillip Seckman

Phillip Seckman represents clients concerning government and commercial contract matters. His practice spans a broad range of subjects related to federal procurement law, state and local procurement law, and complex federal regulatory issues. He concentrates his practice in the areas of commercial item acquisitions, GSA schedule contracting, cybersecurity, compliance, internal investigations, and bid protests (both federal and state). A significant component of his practice involves government contract cost allowability, proper cost accounting, and contract cost and pricing issues.

About Mikaela Colvin

Mikaela Colvin is an associate in Dentons’ Government Contracts practice and focuses on all aspects of government contracts counseling and litigation.