CMMC Phase 2 Is Paused. Are You Still on the Hook?

On July 13th, the Department of War suspended CMMC Phase 2 certification requirements. Your DFARS 7012 obligations didn't go anywhere. Answer a few quick questions to find out where you actually stand.

Are you a defense contractor, planning to become one, or do you support defense contractors?(Required)

Includes prime contractors, subcontractors, MSPs, and suppliers

Yes

Press Enter

Do you receive CUI (Controlled Unclassified Information)?(Required)

This might include emails or files marked as CUI, either from a government agency or a prime contractor.

Yes

No/Unsure

Press Enter

Have you already self-assessed against NIST SP 800-171 and submitted a current score to SPRS?(Required)

This is the requirement the DoW is actively enforcing right now, paused certification deadline or not.

Yes

No/Unsure

Press Enter

Might those contracts involve CUI (Controlled Unclassified Information)?(Required)

CUI includes technical data, specs, or documents marked "CUI" or expected to include CUI from government agencies or primes

Yes

No/Unsure

Press Enter

Do you have DFARS clauses in your DoD contracts or solicitations?(Required)

Clauses 7012 and 7021 are the most likely to appear — but also search for 7019, 7020, and 7025

Yes/Unsure

Press Enter

Do you handle only FCI documents or only sell COTS products?(Required)

When fulfilling government contracts, do you sell only COTS (commercially available, off the shelf) items? Or, do you receive emails or documents marked as FCI (Federal Contract Information)?

Yes

Press Enter

Please provide us with your name(Required)

First Name Last Name

Press Enter

To see your results, enter your work email(Required)

Press Enter

Company(Required)

Press Enter

0% Completed!