DOD suspends CMMC Phase 2, launches 60-day ‘reform’ review
Citing prohibitive costs for small and mid-size contractors, the Defense Department will keep Phase I self-assessments in place while a new task force studies the cyber and supply chain security program's future.
The Defense Department has essentially ended the Cybersecurity Maturity Model Certification program by suspending its second phase requirements. DOD is keeping in place Phase 1, which requires self-… [+2832 chars]