The CMMC Pause Leaves Contractors With Hidden Exposure

The Pentagon’s suspension of CMMC Phase II third-party assessment requirements isn’t a pass to relax. Rather, it’s an exposure shift. While mandatory C3PAO certifications are still on hold following the Department of War’s class deviation, Phase I self-attestation requirements remain fully active.