Issue link: https://iconnect007.uberflip.com/i/1546025
34 SMT007 MAGAZINE I AUGUST 2026 F O RG I N G T H E A RS E N A L O F F R E E D O M D E PA RT M E N T O F WA R S U S P E N D S C M M C P H AS E I I R EQ U I R E M E N TS The Department of War today announces the immediate suspension of the Cybersecurity Maturity Model Certification (CMMC) Phase II re- quirements, which were originally scheduled to come into effect on November 10, 2026. All Phase I self-assessment requirements remain firmly in place. Additionally, the Department will begin a comprehensive review of CMMC aimed at aligning with Secretary of War Pete Hegseth's Acquisition Transformation System (ATS) directives prioritiz- ing speed to capability, lowering barriers for small, medium, and non-traditional businesses, and re- placing bureaucratic compliance with scalable, re- silient cybersecurity measures. Ensuring access to leading-edge commercial capabilities is a critical driver powering the Secre- tary of War's operational execution for the "Arsenal of Freedom." While the current CMMC program was designed to enhance DIB cybersecurity, instead it has created prohibitive compliance costs and bureaucratic burdens. Recent data, including reports from the Small Business Administration (SBA), confirmed that CMMC compliance is forcing innovative companies out of the Defense Industrial Base (DIB), which will delay the delivery of critical capabilities to the warfighters. "In support of Secretary Pete Hegseth's direc- tive to reduce compliance barriers for small and medium sized businesses, we are today suspending the CMMC Phase II requirements and initiating a 60-day study of the future of this program," said DoW Chief Information Officer Kirsten A. Davies. Editor's note: The following announcement was released on July 13, 2026, and is published here in its entirety.