Defense Suppliers Must Maintain Cyber Rules Despite Phase II Pause

Washington, Monday, 5 October 2026.
The Pentagon suspended CMMC Phase II requirements, but basic cybersecurity self-assessments remain strictly mandatory for hundreds of thousands of suppliers. Non-compliance threatens contracts and risks massive supply-chain breach costs.