The Department of Defense (DoD) has announced a significant change to the Cybersecurity Maturity Model Certification (CMMC) program. On July 13, 2026, the DoD suspended the planned implementation of CMMC Phase 2, originally scheduled for November 10, 2026. For defense contractors and subcontractors, this raises an important question: Does the suspension mean businesses can putCMMC Phase 2 Suspended: What Defense Contractors Need to Know