CMMC Phase II suspended: what the pause means for readiness, certification and False Claims Act risk
The government paused the contractual phase-in of Phase II certification requirements. It did not repeal the CMMC program, suspend FAR or DFARS safeguarding clauses.
Which CMMC level applies to your contracts?
Your required CMMC level is based on the solicitation or contract and the type of information your systems process, store, or transmit. Company size, industry reputation, or informal guidance do not determine your CMMC level.