# DoD Suspends CMMC Phase 2 Certification

The Department of Defense formally suspended the CMMC Phase 2 third-party certification requirement effective July 13, 2026, as codified in DFARS Class Deviation 2026-O0025. Despite this suspension, contractors remain fully obligated to comply with underlying cybersecurity requirements, including NIST SP 800-171 Revision 2 controls, self-assessments, and submission of Supplier Performance Risk System (SPRS) scores. Enforcement of these requirements continues, as evidenced by recent multi-million dollar False Claims Act settlements involving major contractors such as Honeywell Aerospace and LOGZONE. Procurement professionals and contractors should maintain rigorous cybersecurity documentation and compliance practices, as the suspension applies only to certification, not to compliance or enforcement. The CMMC Reform Task Force is still reviewing recommendations, indicating potential future changes to the program.

- **Why this matters:** Contractors must continue to meet cybersecurity standards and document compliance to avoid enforcement risks despite the pause in certification requirements.
- The suspension affects contract clauses but does not reduce False Claims Act exposure related to cybersecurity misrepresentations.
- Organizations should prepare for possible updates from the CMMC Reform Task Force and adjust procurement strategies accordingly.
- Maintaining defensible cybersecurity postures remains critical for contract eligibility and risk management in DoD acquisitions.

**Jurisdictions:** federal
**Industries:** Defense & Military
**Topics:** Cybersecurity
**Published:** September 28, 2026

### Government Entities
- Department of Defense (DoD)
- Department of Justice (DOJ)
- Defense Pricing and Contracting
- FAR Council

### Vendors
- Honeywell Aerospace Inc. (defendant in False Claims Act settlement)
- LOGZONE Inc. (defendant in False Claims Act settlement)

### Key Quotes
> The False Claims Act exposure for misrepresenting NIST SP 800-171 compliance remains in force and enforcement actions continue, including a $2 million settlement with Honeywell Aerospace after the Phase 2 suspension.
> — Original poster

### Sources
- [Current worth of CCP?](https://www.reddit.com/r/CMMC/comments/1wshy64/current_worth_of_ccp) - reddit-cmmc