Navigating the Pause: The Increased Impact of CMMC Self-Assessments

With CMMC Phase 2 third-party certification paused for a 60-day DOW review, defense contractors still face mandatory Phase 1 self-assessments and rising False Claims Act exposure. This guide breaks down what hasn't changed — NIST SP 800-171 controls, FedRAMP requirements for compliance tooling, and SPRS accountability — and gives security leaders a phase-by-phase checklist to build a defensible, audit-ready compliance program regardless of how the review concludes.

Sponsored by

Email *

Full Name *

Employer *

Agency/Department *

Organization Function *

Please Provide Your Organization's Name *

Grade/Rank *

Job Function *

Job Title *

Phone *

City *

State *

Zip Code *

Country *

Country (Other) *

I want to receive occasional news and updates from trusted partners

I agree to the use of my personal data by Government Executive Media Group and its partners to serve you targeted ads. Learn more.

Please save my information for future visits

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms and Conditions apply.