Pentagon announces ‘immediate suspension’ of CMMC Phase II mandates
Top Pentagon officials said as currently executed, CMMC is too prohibitively burdensome on the Defense Industrial Base.
‘Stop doing that’: Arrington pleads to industry to quit ‘complaining’ about CMMC
"I don't need China, Russia, Iran, Afghanistan, North Korea, knowing any more about us than they already do," Katie Arrington, who is performing the duties of the DoD CIO, said.
How the Pentagon is shaping its next cyber strategy
Drawing on Breaking Defense's TechNet Cyber 2026 coverage, this eBook examines how the Pentagon is advancing AI, cybersecurity, and cyber strategy to strengthen the future force.
To protect F-47 plans from hackers, Boeing should lean on CMMC, zero trust: DoD official
“The CMMC certification will be proof — trust, verify that those companies have the cyber posture needed to secure the data that is critical to national security, like on programs like the F-47,” Katie Arrington, who is performing the duties of the DoD CIO told Breaking Defense.
CMMC 2.0 and the possibility of a cyber service: 2025 preview
2025 may be a telling year for the fate of the Pentagon's new CMMC 2.0 program.
Pentagon’s cybersecurity mandate CMMC 2.0 likely to survive under Trump
Even for a political party that campaigns on cutting regulations, Pentagon and industry figures say the next Republican administration will likely weigh security over deregulation.
Army to defend small businesses against hackers with NCODE secure cloud enclave pilot
Beginning as a $26 million, two-year pilot project, the NCODE enclave will offer CMMC-compliant “cybersecurity as a service” for smaller firms that can’t protect themselves against advanced threats, said Army Undersecretary Gabe Camarillo.
presented by
Scaling AI for Defense Teams Without Increasing Data Risk
AI is expanding the mission data footprint across defense environments, increasing the need for scalable, layered data-at-rest (DAR) protection.
CMMC 2.0 final rule released: New compliance standards set to begin next year
CMMC 2.0 introduced a third-party assessment dependent on contractor's CUI capacity.
Survey shows very few DoD contractors ‘fully’ ready for CMMC 2.0 ahead of 2025 rollout
"We have a really a kind of crisis of cybersecurity or lack of within the defense industrial base," CyberSheath CEO Eric Noonan told Breaking Defense.
Pentagon submits new proposed rule to implement CMMC 2.0
The new proposal includes new requirements for contracting officers, ensuring that parties bidding on Pentagon contracts are properly protecting sensitive information.
DoD and Congress should walk away from CMMC
In this op-ed, William Greenwalt of the American Enterprise Institute lays out reasons why the DoD and Congress should move away from CMMC 2.0.
presented by
ASELSAN at SAHA 2026: Introducing next-generation multi-domain defense systems
Unveiled at SAHA 2026, ASELSAN’s latest portfolio reflects a layered and integrated defense architecture, bringing together electronic warfare, counter-UAV, airborne and naval capabilities within a unified operational framework.
CMMC 2.0 on track to start early 2025
“We are moving forward, we're hoping by the first quarter of calendar year [2025] we'll be able to start enforcing this and putting this in contracts," Dave McKeown, Deputy CIO for the DoD, said.
New proposed rule for CMMC 2.0 lays out security requirements, raises some eyebrows
At its most basic level, under CMMC 2.0, defense contractors and subcontractors that have access to controlled unclassified information (CUI) will be required to demonstrate the “maturity” of their cybersecurity programs against a set of increasingly advanced capabilities.
DoD official envisions faster ‘secure pipeline’ to help small business tech contractors protect information
"In my mind, these are some of these avenues that we're looking at at an idea phase now to see if we can put resources behind it," said Robert Vietmeyer, director for cloud and software modernization.
Pentagon eyeing the cloud to help firms meet CMMC cybersecurity requirements
“For instance, in the CMMC realm, rather than go out and assess each and every network of our industry partners, I’m kind of keen on establishing some sort of cloud services [...]” said David McKeown, DoD deputy chief information officer and senior information security officer