The Department of War (DoW) announced that it has suspended CMMC Phase 2 requirements effective July 13, 2026, pausing the certification tier originally set to take effect on November 10, 2026. The move follows Small Business Administration data showing compliance costs were pushing innovative companies out of the
CMMC Level 1 is the foundational tier of the Cybersecurity Maturity Model Certification program. It covers 15 basic security requirements derived from FAR Clause 52.204-21. If your contract specifies a CMMC Level 1 assessment and you only handle FCI across all contracts, then you fall under Level 1. Here’s what you need to know. Key Takeaways CMMC Level 1 requires annual self-assessment and SPRS affirmation against 15 security controls from FAR 52.204-21. It applies to
AI adoption in CMMC regulated environments is one of the fastest ways to create compliance exposure your assessor will find and one of the most misunderstood opportunities for operational advantage. Before your organization spins up a new tool or rolls out a policy, there are a few things executives at DIB contractors need to understand. Key Takeaways Any AI tool that touches CUI is inside your CMMC assessment boundary, whether you planned it that way or
Recent settlements for contract violations offer clear lessons that must be learned from because government contractors are evaluated long after the ink dries on a contract. Expectations persist for the life of the contract, and company leaders are expected to affirm that the required controls remain in place. When those affirmations diverge from reality, the Department of Justice has shown it will act. Table of Contents The Justice Department’s Latest False Claims Act Settlements Since launching the Civil
From cleverly disguised phishing attacks to sophisticated malware to hard-to-detect insider attacks, your organization faces many cybersecurity risks daily. Any weakness in your defenses can have disastrous consequences, jeopardizing your operations and irreparably damaging your reputation. Cybersecurity audits are a great way to keep these threats at bay and reassure your customers and business partners that their personal information is safe with you. They can, however, also be a source of stress and confusion, which is
The Department of War (DoW) announced that it has suspended CMMC Phase 2 requirements effective July 13, 2026, pausing the certification tier originally set to
CMMC for small businesses is not a lighter version of the program. If your contract involves Controlled Unclassified Information (CUI), you are subject to the
CMMC Level 1 is the foundational tier of the Cybersecurity Maturity Model Certification program. It covers 15 basic security requirements derived from FAR Clause 52.204-21.
Expert checklists, guides, and research built for defense contractors.
