CMMC Phase 2 Is Suspended... So Why Is the DoD Still Assessing Contractors?

Episode notes

Everyone saw the headline that CMMC Phase 2 was suspended. Almost nobody read the part that says government-led assessments are still happening. In this episode we look at what the DoD actually said, how DIBCAC decides who gets assessed, why the LogZone False Claims Act case matters, and why today's approach looks surprisingly similar to the original CMMC 1.0 phased rollout. If you think the suspension means nobody is verifying cybersecurity anymore, you may want to read the Phase 2 suspension memo one more time. Phase 2 Suspension: LogZone FCA: DFARS 7020: DoD Critical Tech: CIO Interview: Suspension Memo (PDF):

Related episodes across the Index

Other episodes covering the same guests and topics, from across The B2B Podcast Index.

• AI and Cybersecurity in SMBs: Insights from Bruno LecoqSecuring the Realm · on CMMC79 / 100
• Post-Quantum Cryptography: What Every Organization Needs to Know with Michael FasuloHacker Valley Studio · on NIST72 / 100
• From Demo to Production- Building Enterprise AI Agents That Actually Work with Microsoft Copilot Studio with Elliot Margot [MVP]M365.FM · on compliance

• The DoD's "Basic" Cybersecurity Isn't Basic at All93 / 100
• A Perfect SPRS Score Turned Into a $507K Settlement64 / 100
• The DoD Said This Was "Out of Scope"... Now They're Asking About It
• CMMC Phase 2 Is Suspended... But Contractor Liability Just Went UP
• Last Chance to Influence the FAR CUI Rule