CMMC deadlines
Each date links to the official document it comes from.
| Date | What | Source |
|---|---|---|
| Dec 16, 2024 | CMMC Program rule (32 CFR part 170) takes effect Defines the CMMC levels, assessments and ecosystem. | Source, checked 2026-10-16 |
| Nov 10, 2025 | DFARS CMMC rule takes effect; Phase 1 begins Level 1 (Self) or Level 2 (Self) as a condition of award for applicable contracts. | Source, checked 2026-10-16 |
| Jul 13, 2026 | Department of War suspends Phase 2 Two memoranda suspend Phase 2 (mandatory Level 2 C3PAO and Level 3 assessments) and start a CMMC Reform Task Force review. Phase 1 self-assessments, DFARS 252.204-7012 and NIST SP 800-171 remain in effect. No resumption date has been set. | Source, checked 2026-10-16 |
| Nov 10, 2026 | Phase 2 (suspended) Was scheduled to add Level 2 (C3PAO) as a condition of award. Suspended by the Department of War on July 13, 2026, pending review. | Source, checked 2026-10-16 |
| Nov 10, 2027 | Phase 3 (on hold pending review) Date in the 2024 rule. Future CMMC milestones are paused while the Department of War reviews the program. | Source, checked 2026-10-16 |
| Nov 10, 2028 | Phase 4 (on hold pending review) Date in the 2024 rule. Future CMMC milestones are paused while the Department of War reviews the program. | Source, checked 2026-10-16 |
CMMC deadlines & changes
Rule dates, phase changes and new firms, with sources.
Independent directory. Not affiliated with, endorsed by, or acting on behalf of The Cyber AB, the DoD, or any listed firm. Credential status can change; confirm on the Cyber AB Marketplace.