Pentagon pauses the cyber audit rule that was pushing small suppliers out

The Pentagon has paused Phase 2 of its Cybersecurity Maturity Model Certification (CMMC) program, which required defense contractors to pass third-party cybersecurity audits before contract awards. This suspension stems from a shortage of accredited assessors relative to the large number of suppliers, and concerns that compliance costs and complexity are driving small businesses away from defense contracts. A task force has been established to review the program and recommend changes within 60