Training & Education

CMMC Phase 2 Pause: Steps for Defense Contractors to Maintain CUI Compliance

Training & Education

CMMC Phase 2 Is Paused—CUI Compliance Is Not: What Defense Contractors Must Do Now

by Josh Manuel on Jul 23 2026
The Department of War has paused the rollout of CMMC Phase 2, but that does not mean CMMC Level 2, NIST SP 800-171, DFARS requirements, or CUI safeguarding obligations have been canceled or suspended. Contractors should use this review period to close security gaps, maintain accurate self-assessments, and continue protecting Controlled Unclassified Information—not put compliance efforts on hold.