Topic · cyber-ab

Cyber AB

The Cyber AB — accreditation body for the CMMC ecosystem (C3PAOs, RPOs, assessors).

RSS feed ↗

trade-press
CMMC pause puts point-in-time assessments on the block
The pause leaves nearly 2,000 already-certified contractors wondering what their Level 2 certification is worth as DoD rethinks the point-in-time model.
The Defense Department has frozen new CMMC third-party assessment requirements and launched a reform task force, suspending the Phase 2 ramp that was scheduled to begin November 2026. Phase 1 self-assessment requirements remain in force, but the freeze leaves nearly 2,000 contractors holding Level 2 certifications uncertain about their status. Cyber AB CEO Matt Travis, in a Federal News Network interview, outlined reform proposals that include replacing point-in-time audits with continuous monitoring and reducing assessment teams from three assessors to two for smaller firms, changes he said could be implemented without new rulemaking.
OCT 3
trade-press
CMMC program operational despite phase-two pause, Cyber AB says
The pause is tactical, not strategic, but the task force's mandate to "drastically reduce costs" could reshape level two for small and non-traditional shops before anything becomes contractually mandatory.
CMMC's phase-two implementation timeline is on hold after DoD's July 13 pause and 60-day task-force review, but Cyber AB CEO Matthew Travis told a July 28 town hall that the program itself remains operational: C3PAOs are conducting level two certifications, DFARS 252.204-7012 compliance is still in force, and both CMMC portals remain open. Travis framed certification as "the best insurance policy against False Claims Act risk" and urged contractors to respond to DoD's RFI by the Aug. 14 deadline. The task force's authority to alter the rule's cost, scope, or timing remains undefined, and the Cyber AB hasn't been contacted for tier-four participation yet.
AUG 25
trade-press
Cyber AB town hall convenes amid CMMC phase two pause
The Cyber AB called the pause surprising; Tuesday's town hall is its first chance to argue the assessment infrastructure it accredited is worth preserving.
The Cyber AB holds its July town hall Tuesday, the first public forum since the Pentagon paused CMMC phase two on July 13. CEO Matthew Travis called the decision "surprising and disappointing" and pledged cooperation with the newly formed CMMC Reform Task Force. The pause halts the planned November rollout of third-party assessment requirements in solicitations and caught C3PAOs off guard. They'd spent years building the assessment ecosystem.
JUL 27
trade-press
DoD suspends CMMC third-party assessments indefinitely
Small-business cost pressure has stopped the verification model DoD built after deciding self-attestation was failing.
Federal News Network reports that DoD has suspended Cybersecurity Maturity Model Certification (CMMC) third-party assessment requirements indefinitely and opened a 60-day program review, with recommendations expected by late September. Primes and subcontractors face frozen certification pathways, while CMMC Third-Party Assessment Organizations (C3PAOs) lose near-term assessment revenue. DoD is reopening the verification model it built because contractor self-attestation did not work.
JUL 17
trade-press
House NDAA amendment targets CMMC cost burden
Congress is no longer just watching CMMC rollout mechanics; it is asking whether the market structure is pricing out small suppliers.
Inside Cybersecurity reports that House Armed Services advanced the fiscal 2027 National Defense Authorization Act, 44-12, with a Rep. Jeff Crank amendment requesting a Defense Department briefing on Cybersecurity Maturity Model Certification reforms by March 1, 2027. The amendment cites excessive regulatory burdens, small-business disadvantage, and fee transparency concerns involving the Cyber AB and CMMC Third-Party Assessment Organizations. Primes, subs, assessors, and the Cyber AB get the message: CMMC cost is now a Hill oversight target.
JUN 5

Cyber AB

CMMC pause puts point-in-time assessments on the block

CMMC program operational despite phase-two pause, Cyber AB says

Cyber AB town hall convenes amid CMMC phase two pause

DoD suspends CMMC third-party assessments indefinitely

House NDAA amendment targets CMMC cost burden