CMMC Phase 2 is paused. Your obligations aren't.
If CUI comes through your contract, DFARS 7012 still requires you to implement the 110 security controls in NIST SP 800-171.
Phase 1 is still in effect too. That means CMMC self-assessments are still showing up in contracts, and your SPRS score still matters.
The pause gives you time. Use it to find your gaps and fix them before Phase 2 comes back.
Not sure where you stand? Start with our free SPRS score worksheet: https://cyberneza.com/sprs-score-worksheet
Cyberneza is veteran-owned, 100% US-based, and in Orlando.
Larry Downard
Posted on
CMMC Phase 2 Is Paused. Your Obligations Aren't.
For further actions, you may consider blocking this person and/or reporting abuse
Top comments (0)