If you've been bracing for CMMC Level 2 third-party certification requirements to hit your contracts this November, you can exhale a little. On July 13, 2026, the Department of War suspended the rollout of CMMC Phase 2, the stage that was set to require independent C3PAO assessments for many contractors handling Controlled Unclassified Information (CUI). No replacement date has been announced. For small and mid-sized defense contractors, this news tends to land one of two way