Pentagon halts Phase 2 of cybersecurity certification program, launches 60-day ‘reform’ review

The Defense Department has essentially ended the Cybersecurity Maturity Model Certification program by suspending its second phase requirements.The Pentagon will keep in place Phase 1, which requires self-assessments for how companies protect controlled unclassified information in their systems. But the department said Monday it is suspending Phase 2, which was to begin on Nov. 10 and requires third-party certifications.DOD is also launching a review of CMMC to make sure it aligns with