CMMC Pause Divides Cyber Experts on Compliance Future

The Defense Department’s (DOD) suspension of the next phase of the Cybersecurity Maturity Model Certification (CMMC) program has divided cybersecurity experts over whether the pause should produce limited changes to third-party assessments or a broader shift in how the government measures cybersecurity. The DOD chief information officer (CIO) announced on July 13 that the department is immediately suspending CMMC Phase 2 requirements, which had been scheduled to take effect Nov.