CMMC Phase II is Paused. Your Cybersecurity Obligation is Not.

The Department of War’s decision to suspend Phase II of the Cybersecurity Maturity Model Certification program has brought both relief and uncertainty to the Defense Industrial Base (DIB).

Phase II was expected to expand third-party assessments for contractors handling Controlled Unclassified Information, or CUI. Instead, the DoW has paused Phase II and later implementation milestones while it reviews the program’s cost, complexity and ability to scale across the defense supply chain.

The pause may change when and how contractors are assessed. It does not remove their responsibility to protect sensitive government information or meet existing contractual obligations.

Download our viewpoint to learn more about what this pause means.

What the CMMC Phase II Suspension Means

Existing Cybersecurity Obligations Remain

Why Waiting Creates More Risk

Five Actions Contractors Should Take During the Pause

Why Red River

Red River has spent more than 25 years helping commercial, federal and SLED organizations make smarter technology decisions. From cybersecurity and cloud to AI and IT infrastructure, we design, deploy and manage solutions that support mission-critical work.

Download the ebook

25+ Years of Experience

Serving commercial, federal and SLED customers since the late 1990s

Five Integrated Practices

AI, cloud, collaboration, cybersecurity and IT infrastructure under one roof

Public Sector Ready

Built to meet the security and compliance demands of government work

Managed and Professional Services

From advisory and deployment to ongoing operations

Built for Regulated Organizations, but Usable by Anyone.

Cybersecurity First

Solutions designed to protect businesses and government organizations

Cloud Without Compromise

Optimize cost, increase efficiency and strengthen security

AI That Delivers Insight

Turn data into actionable decisions for business and government teams

How We Work With You

Whether you need a full managed services partner or expert help on a single project, Red River brings the people, process and technology to get it done right. Headquartered in Chantilly, Virginia, we support customers across the country.

Managed Services

Ongoing monitoring, support and optimization so your team can focus on the mission

Professional Services

Strategy, architecture and implementation from experienced engineers

Lifecycle and XaaS Options

Flexible consumption models that match how you want to buy and scale