08/26/2026
You may have seen that the government paused Cybersecurity Maturity Model Certification (CMMC). Here's what that actually means. ⬇️
🗓️ On July 13, the Department of War suspended the part of the CMMC program that would have required an outside auditor to certify contractors.
What didn't change: If you handle sensitive government information, you're still required to protect it, still required to complete a self-assessment, and still accountable for the score you report.
So, the honest summary is that the audit requirement paused. The responsibility didn't. We wrote up the whole picture, including what still applies to your contracts: https://hubs.li/Q04tMQN30