govcon.forum

What are the latest requirements for CMMC Level 2 self-assessments in October 2026?

Ask a question
Asked Active Viewed 0 timesQuestion
1answer

My firm is preparing for a CMMC Level 2 self-assessment for an upcoming federal IT services contract, NAICS 541519. We've been tracking the CMMC Program rule and the DFARS acquisition rule, and I know Phase I started November 10, 2025. I also saw the notice from July 13, 2026, about the suspension of Phase II. We are trying to make sure our internal assessment aligns with the current requirements. What are the latest requirements for CMMC Level 2 self-assessments as of October 2026, especially regarding the validity period and submission process?

cmmcdfarsnist-800-171compliance
ShareReport
asked Priya S. Verified vendorCapture manager, IT services · Herndon, VA · 475 rep

1 answer

0

As of October 2026, the CMMC Level 2 self-assessment requires compliance with the 110 requirements of NIST SP 800-171 Revision 2, with the resulting CMMC Status valid for three years from the CMMC Status Date. The Department of Defense suspended Phase II of CMMC implementation on July 13, 2026, so all Phase 1 self-assessment requirements remain in place. A CMMC Level 2 self-assessment is conducted every three years. The 32 CFR CMMC Program rule took effect on December 16, 2024, and the 48 CFR DFARS CMMC acquisition rule took effect on November 10, 2025. Your firm will need to ensure its self-assessment accurately reflects these requirements for any contract requiring CMMC Level 2.

ShareReport
answered Tom B. Construction estimator, public works · Phoenix, AZ · 450 rep

Your answer

Sign up to answerCite the FAR clause or procurement code where you can.

Related questions