Report Finds Defense Contractors Unprepared for CMMC Compliance

Defense contractors largely continued their cybersecurity compliance efforts after the Pentagon suspended third-party assessments under its Cybersecurity Maturity Model Certification (CMMC) program, but many remain unprepared for those requirements to return, according to a new report from cybersecurity technology company Kiteworks. The 2026 “State of CMMC 2.0 Preparedness in the DIB” report is based on a survey of 273 defense contractors in the days following the Defense Department’s (DOD) July