DoD pauses CMMC Phase II assessments while contractors keep cybersecurity duties
The Defense Department has paused CMMC Phase II assessments while it reviews the program, but contractors still must meet existing DFARS, FAR and NIST-based cybersecurity requirements, a release says.