Fisch Solutions has published an analysis outlining what the suspension of CMMC Phase 2 means for defense contractors and manufacturers across New York's Hudson Valley.
-- Fisch Solutions has published an analysis examining the suspension of CMMC Phase 2 and its implications for defense manufacturers and contractors across New York's Hudson Valley. The resource details which cybersecurity obligations remain in force, what has changed under the Department of Defense's July 13 memorandum, and the steps contractors should take while the program undergoes a formal 60-day review.
More information is available at https://fischsolutions.com/cmmc-phase-2-suspended-hudson-valley-defense-contractors-2/
A Fisch Solutions spokesperson said that the suspension of Phase 2 should not be interpreted as a suspension of cybersecurity responsibilities for defense contractors. "The timeline has changed, but the underlying security requirements have not simply disappeared. Contractors still need to understand what their existing contracts require and maintain the controls that apply to them."
CMMC was created by what is now the Department of War to verify that contractors and subcontractors are protecting Federal Contract Information and Controlled Unclassified Information. The Phase 2 rollout was expected to introduce third-party assessments conducted by authorized C3PAO organizations for companies subject to Level 2 requirements, with the next transition date set for November 10, 2026.
Fisch Solutions' analysis notes that contractors should continue maintaining all applicable NIST SP 800-171 Rev 2 controls and keep their cybersecurity documentation and SPRS scores current. Companies should also review their active contracts and confirm in writing whether prime contractors continue to impose specific cybersecurity requirements, as prime flow-down obligations remain in effect independent of the federal timeline.
"Defense manufacturers should use this period to identify and address security gaps rather than treating the suspension as a reason to stand still," the spokesperson added. "Having accurate documentation and a clear understanding of your current security posture will put you in a stronger position regardless of where the CMMC program goes next."
The firm also notes that mid-September is an important milestone in the review process. According to its analysis, the CMMC Reform Task Force is expected to deliver recommendations to the Department of War CIO around that time, with potential changes to how assessments are conducted and reduced compliance burden for smaller contractors. A public comment period remains open until August 14, 2026.
About Fisch Solutions
Fisch Solutions is a Hudson Valley-based managed IT and cybersecurity provider serving businesses across New York, New Jersey, and Connecticut. The company works with manufacturers and defense-related organizations on technology, cybersecurity, and compliance needs, and has been recognized on both the CRN MSP 500 and the Channel Futures MSP 501.
Defense contractors and manufacturers seeking to understand their current CMMC position can find further details and guidance in the full analysis published by Fisch Solutions.
Interested parties may also visit https://fischsolutions.com/ for more information.
Contact Info:
Name: Jason Fisch
Email: Send Email
Organization: Fisch Solutions
Address: 3188 Route 9W Suite 1, New Windsor, New York 12553, United States
Website: https://fischsolutions.com
Source: PressCable
Release ID: 89201499
If there are any errors, inconsistencies, or queries arising from the content contained within this press release that require attention or if you need assistance with a press release takedown, we kindly request that you inform us immediately by contacting error@releasecontact.com (it is important to note that this email is the authorized channel for such matters, sending multiple emails to multiple addresses does not necessarily help expedite your request). Our reliable team will be available to promptly respond within 8 hours, taking proactive measures to rectify any identified issues or providing guidance on the removal process. Ensuring accurate and dependable information is our top priority.