govcon.forum

How does the Cybersecurity Maturity Model Certification (CMMC) timeline impact new DoD solicitations in late 2026?

Ask a question
Asked Active Viewed 1 timeQuestion
1answer

Hey everyone,

I'm trying to understand the current state of CMMC for DoD work. My company is a small business, NAICS 561730 for landscaping services, and we're looking at a presolicitation notice for grounds maintenance at a Navy base in Jacksonville. It mentions CMMC Level 1, but then I see news about different phases of implementation.

I thought Phase II was supposed to start in November 2026, but then I read something about it being suspended. We've gone through the FAR 52.204-21 requirements and have those in place. I just need to know if we should be doing anything else right now for new DoD solicitations in late 2026.

What CMMC level should we really be ready for, and what's the actual timeline for new solicitations that are coming out now?

cmmcdfarsdodcompliancesmall-business
ShareReport
asked Jordan P. First-year bidder, landscaping and grounds · Jacksonville, FL · 482 rep

1 answer

0

For new DoD solicitations in late 2026, you should be ready for CMMC Level 1 self-assessment requirements because Phase II of CMMC implementation was suspended. The first phase of CMMC implementation began on November 10, 2025. On July 13, 2026, the Department suspended Phase II, which had been scheduled for November 10, 2026, and all Phase 1 self-assessment requirements remain in place. CMMC Level 1 consists of the 15 requirements of FAR 52.204-21, Basic Safeguarding of Covered Contractor Information Systems. Since you already have these requirements in place, you are ready for CMMC Level 1. A CMMC Level 1 self-assessment is conducted every 3 years. The CMMC Program rule, 32 CFR 170.4, defines the levels, and the DFARS CMMC acquisition rule, DFARS Case 2019-D041, specifies when and how they apply in contracts.

ShareReport
answered Dave H. Verified vendorParts distributor, DLA and DIBBS · Dayton, OH · 714 rep
Thanks, Dave. So glad to hear that. I will make sure my team has documented our compliance with the 15 requirements of FAR 52.204-21. That makes sense for our small shop. · Jordan P. ·

Your answer

Sign up to answerCite the FAR clause or procurement code where you can.

Related questions