@DoW_CIO

The DoW is immediately suspending CMMC Phase II requirements to clear bureaucratic roadblocks for the DIB. We must scale warfighter readiness, not paperwork. What you need to know: · Phase II & costly administrative burdens are paused. · Phase I self-assessments remain firmly in place. · NIST SP 800-171 Rev 2 and DFARS 252.204-7012 compliance are still required. · Focus is shifting to tangible cybersecurity and operational resilience, not red tape. To uplift cybersecurity while eliminating unnecessary bureaucracy, we’ve launched a 60-day review on the future of the program to be led by a CMMC Reform Task Force. We are also seeking industry perspectives from the DIB via our new RFI on driving scalable, realistic security measures and operational resilience without compliance burden. Watch the full remarks from DoW CIO Kirsten Davies below. Read the press release: Learn More: