FEDCON Alerts Federal Contractors to CMMC Level 2 Implementation Adjustments and Reaffirms Focus on Level 1 Compliance

FEDCON is informing the public that there's an important update for companies that work with the federal government, especially those in defense and technology

TAMPA, FL, UNITED STATES, August 17, 2026 /EINPresswire.com/ -- FEDCON is informing the public that there's an important update for companies that work with the federal government, especially those in defense and technology. The government has put a hold on some new cybersecurity rules, called CMMC Level 2, that were supposed to start soon. This means companies don't have to worry about meeting these extra requirements right now. But here's the thing: they still have to follow the basic cybersecurity rules, known as CMMC Level 1, to be eligible for federal contracts. These rules are still in place and are being enforced, so companies need to make sure they're meeting them to avoid any problems. The temporary suspension of the new rules might seem like a break, but it's essential for companies to stay on top of their cybersecurity to keep working with the government.

The federal government has put a temporary stop to the rollout of CMMC Level 2. This is because they are taking another look at the timeline for assessments, how many third-party assessors are available, and how ready the industry is. To get CMMC Level 2, companies have to go through tough audits by a third party to make sure they are handling sensitive information correctly. These audits check 110 different security controls that are based on rules set by NIST. By putting the rollout on hold, the government can make the assessment standards better, make the paperwork process easier, and fix some of the problems that are slowing down the implementation across the defense industry. This will help make sure that companies are properly protected and that the government can trust them with sensitive information. The government is working to refine the assessment standards and streamline the process, which will ultimately benefit the industry as a whole.

FEDCON is telling defense contractors not to think that the pause in Level 2 means they can ignore all the federal rules about cybersecurity. The rules for CMMC Level 1, which are about keeping Federal Contract Information safe using 17 basic cybersecurity practices, are still in place and haven't changed because of the pause in Level 2.

Federal procurement rules continue to mandate strict adherence to CMMC Level 1 standards for all contractors and subcontractors handling FCI. Key practices under Level 1—including access control management, regular system updates, basic network authentication, and sanitization of removable media—serve as non-negotiable prerequisites for contract awards and renewals.

To help defense vendors get through this big change in rules, FEDCON suggests they take three steps right now.

Maintain Continuous Self-Assessments: Ensure annual CMMC Level 1 self-attestations in the Supplier Performance Risk System (SPRS) remain current and accurate.

Make sure subcontractors follow basic cyber security rules. This is important because the main contractor is still responsible if something goes wrong. Check that these smaller vendors have good cyber hygiene practices in place, like strong passwords and keeping software up to date. This is the minimum level of security they should have, known as Level 1.

Preserve Level 2 Documentation: Continue internal mapping against NIST SP 800-171 controls, as the Level 2 framework is expected to resume under updated implementation guidelines once administrative reviews conclude.

We will keep an eye on what the federal government is doing with its rules and regulations, as well as any changes the Department of Defense makes, and any updates to procurement rules. This way, we can give the people who work with federal contracts the information they need in a timely manner.

About FEDCON

FEDCON is a top resource that helps companies work with the government. They make it easier to understand and follow the rules for getting government contracts and growing a business. You can find out more at FEDCON.com.

Marina Nicola
Federal Endowment Directing Consultants, LLC
+1 855-233-3266
email us here
Visit us on social media:
LinkedIn
Instagram
YouTube