Free CMMC Readiness Review
Find out where you stand with a free CMMC Readiness Review from GlacisTech, Powered by CyberCOP™.
What the pause does and does not change.
On July 13, 2026, DoD suspended Phase 2 of CMMC, which would have required third-party certification for most contracts involving CUI starting November 10, 2026. No new date has been announced.
What did not change: CMMC Level 1 and Level 2 self-assessments are still a condition of award, your score must still be posted in SPRS with an annual affirmation, and DFARS 252.204-7012 and NIST SP 800-171 still apply. Many prime contractors are also still asking their suppliers to be ready for certification.
Is your organization CMMC-ready?
For smaller suppliers in the Defense Industrial Base (DIB), the pause has added confusion, not clarity. These are the questions we hear most:
- Which CMMC level applies to my business?
- Is my SPRS score accurate, and could I defend it?
- Where are my biggest gaps against NIST SP 800-171?
- Will I need new technology or changes to my infrastructure?
- How long will it take to be ready for a third-party assessment?
- What will it cost, and how should I budget for it?
Get your questions answered and start planning, free.
The CMMC Readiness Review is an executive conversation, not a technical audit, verified gap assessment or CMMC certification. Formal CMMC assessments, when required, are conducted by authorized assessment organizations.
Schedule a phone or Microsoft Teams call with our team today
One Coordinated Path to CMMC Readiness
GlacisTech brings technical cybersecurity and managed IT expertise. CyberCOP™ adds dedicated fractional Chief Security Officer (fCSO) leadership, governance, evidence oversight and accountability. The path starts with this free review, followed by a paid scoping assessment, technical remediation led by GlacisTech, and ongoing validation and governance. Learn more about CyberCOP.