FAR

The DoD's suspension of CMMC Phase 2 is a tactical pause, not a regulatory repeal. Contractors face a growing 'compliance debt' as CUI frameworks evolve faster than certification processes.

The CMMC pause touched only third-party verification on DoD contracts. A separate government-wide FAR rule is still moving, and it would extend NIST SP 800-171 Rev 3 to civilian contractors for the first time.