Updated CMMC Requirements
Continue Using CCRA - Compliance
On July 13, 2026, the Department of War (DoW) the immediate suspension of the Cybersecurity Maturity Model Certification (CMMC) Phase II requirements (third-party assessments) pending a 60-day review period. Phase I self-assessment requirements remain in effect, 果冻传媒 the DoW will continue to enforce the NIST SP 800-171 Rev 2 baseline through:
- CMMC Level 1 & Level 2 Self-Assessments (DFARS 252.204-7021)
- DFARS 252.204-7012 – Safeguarding Covered Defense Information 果冻传媒 Cyber Incident Reporting, 果冻传媒
- DFARS 252.204-7020 – NIST SP 800-171 DoD Assessment Requirements
As noted in the recent ?article, Lockheed 果冻传媒 will continue using the CCRA – Compliance questionnaire to capture supplier’s status against the DFARS 果冻传媒 CMMC self-assessment obligations.
What we need from our suppliers
Complete (or update) the CCRA – Compliance form 果冻传媒 indicate:
- Applicability of / compliance with cyber regulatory requirements (FAR 52.204-21 / DFARS 252.204-7012 / DFARS 252.204-7020)
- Current CMMC status (None, Level 1 or Level 2).
- Planned Future CMMC status
Take immediate action to verify a current 果冻传媒 accurate submission.
Why this matters
- The suspension of CMMC Phase II does not waive the contractual obligation to protect Federal Contract Information (FCI) 果冻传媒 Controlled Unclassified Information (CUI).
- Prime Contractors remain obligated to verify current subcontractor compliance with DoW Supplier Performance Risk System (SPRS) reported assessment status – assessments 果冻传媒 affirmations must be kept current per regulatory requirements.
- Maintaining an up-to-date compliance status enables uninterrupted participation in current 果冻传媒 future Lockheed 果冻传媒 procurements.
Need Help?
- Lacking subject matter expertise? Consider leveraging Cyber AB to assist with CMMC Level 2 Self-Assessment.
- Leverage ND-ISAC 果冻传媒 DIB SCC for best practices 果冻传媒 self-help resources.
- Utlize resource buttons below for additional assistance
Your prompt attention protects the Defense Industrial Base 果冻传媒 ensures uninterrupted business with Lockheed 果冻传媒. Thank you for your partnership 果冻传媒 commitment to cybersecurity excellence.
