Live Updates > Live Update Details
2026-07-14 03:32:11
The U.S. Department of Defense has temporarily suspended the cybersecurity-related rules for the second phase of its Cybersecurity Maturity Model (CMM) certification program. The official reason given is that a large number of small and medium-sized enterprises (SMEs) have opted out of the program. The Department of Defense originally launched the certification system to establish unified cybersecurity standards for various companies participating in the defense supply chain, preventing risks such as cyberattacks and data breaches to defense-related data during supply chain transactions. However, the current setback in implementing the second phase reflects the heavy operational burden that the compliance requirements place on smaller businesses with limited cybersecurity budgets. The Department of Defense will likely adjust the rules to better suit the specific circumstances of these smaller businesses, balancing security requirements with their operational pressures before resuming the certification process.
