Explore the most important new and upcoming regulations you need to know about. Upcoming cybersecurity regulations for 2026 include a proposed FAR rule for Controlled
The pause changed certain assessment requirements in federal contracts, but it did not remove the process by which cybersecurity requirements reach subcontractors. Prime contractors are
The purpose of the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 is to protect Controlled Unclassified Information (CUI) in nonfederal systems
The Department of War suspended CMMC Phase 2 on July 13, 2026. But your obligation to protect sensitive data wasn’t suspended with it. If you
The Department of War (DoW) announced that it has suspended CMMC Phase 2 requirements effective July 13, 2026, pausing the certification tier originally set to
CMMC for small businesses is not a lighter version of the program. If your contract involves Controlled Unclassified Information (CUI), you are subject to the
CMMC Level 1 is the foundational tier of the Cybersecurity Maturity Model Certification program. It covers 15 basic security requirements derived from FAR Clause 52.204-21.
CMMC encryption requirements are not the hardest part of a Level 2 assessment, but they are one of the most reliably misunderstood. Most contractors who fail
When a CMMC managed services provider dissolves without warning, your first question probably isn’t about finding a replacement. You’re probably wondering whether your compliance posture
CMMC Level 2 requirements continue to evolve as the Department of Defense finalizes how contractors must protect controlled unclassified information. For organizations handling CUI, the
