Cybersecurity In 2026: When CMMC Paused, DOJ Kept Playing
Fida Olga | Shutterstock
McCarter & English – In a new Feature Comment published in The Government Contractor, McCarter & English attorneys Alex Major, Zachary Myers, and Franklin Turner examine why the Pentagon’s pause of CMMC Phase 2 offers no reprieve from existing cybersecurity obligations or False Claims Act exposure. Drawing on recent DOJ settlements, the authors explore how inaccurate cybersecurity assessments, misaligned security practices, and unsupported representations to the government can create significant legal and financial risks. Their central message to government contractors is clear: certification timelines may shift, but the obligation to substantiate cybersecurity compliance remains.
