.svg)
FOR IMMEDIATE RELEASE
Herndon, VA – July 14, 2026 – Network Depot, a trusted IT Managed Service Provider for small businesses, today shared important breaking news for its clients regarding defense contracting cybersecurity requirements.
The Department of War (DoW) has announced the immediate suspension of CMMC Phase II certification requirements, originally scheduled to take effect on November 10, 2026. Phase I self-assessment requirements remain in place. The DoW has also launched a 60-day comprehensive review of the CMMC program to reduce barriers for small and non-traditional businesses while maintaining strong cybersecurity standards.
“This significant development provides meaningful relief for small businesses in the Defense Industrial Base,” said Network Depot CEO Christopher Boyd. “Many of our clients have been actively preparing for the additional requirements of Phase II. This suspension gives them additional time and flexibility while the DoW refines the program to better support small business participation.”
The pause on Phase II and the continuing enforcement of NIST SP 800-171 Rev 2 through self-assessments will allow companies to maintain essential security controls while lowering immediate compliance costs and complexity. Network Depot reminds all clients that protecting Covered Defense Information remains a contractual obligation under DFARS clause 252.204-7012. Strong cybersecurity practices continue to be a top priority for winning and maintaining DoW contracts.
Network Depot is ready to assist clients during this transition with practical, scalable solutions, including:
- NIST SP 800-171 Rev 2 gap assessments and implementation support
- Security control documentation and remediation
- Managed security services, monitoring, and staff training
- Ongoing compliance guidance as the CMMC review progresses
“Our primary goal is to help our DIB clients achieve effective cybersecurity that protects their operations and supports national defense priorities, while keeping compliance practical and affordable,” added Boyd.
For the official Department of War announcement, visit:
Forging the Arsenal of Freedom: Department of War Suspends CMMC Phase II Requirements
About Network Depot
Network Depot is a trusted provider of managed IT services, cybersecurity, and compliance solutions serving organizations throughout the Washington, DC metropolitan region and across the United States.
