Change alerts

What moved, when, and which stored facts it touches. The monitor re-checks the watched sources daily; a change flags affected facts for re-verification before anything is re-published.

deadline 2026-09-30

Task-force report expected in September

The CMMC Reform Task Force first met July 16 with a 60-day feedback window plus a reported 15-day report window — final report expected September 2026.

· facts: F31
deadline 2026-08-14

Reform RFI comments close 12:00 p.m. ET, August 14

Responses to the "Reforming CMMC and Reducing Compliance Burden for the Defense Industrial Base" RFI are due 12:00 p.m. Eastern on August 14, 2026 — the comment window for shaping the task-force outcome.

source · facts: F37
development 2026-07-31

DFARS Part 204 information-collection renewal filed

Federal Register notice 2026-15544 submits the DFARS Part 204 information-collection (OMB control 0704-0225) for renewal — administrative, but inside the CMMC clause family.

development 2026-07-13

Companion guidance: suspended designations removed from active solicitations and contracts

Reported implementation guidance directs that active solicitations and contracts be amended to remove the suspended Level 2 (C3PAO) and Level 3 designations. An amendment is not automatic relief — the clause binds until your contracting officer issues the modification.

source · facts: F38
development 2026-07-13

CMMC Phase 2 and all pending milestones suspended

DoD CIO memorandum (July 13) suspends the Phase 2 requirements scheduled for November 10, 2026 and all pending and future CMMC milestones, pending a 60-day CMMC Reform Task Force review. Phase 1 self-assessment, SPRS, and DFARS -7012 obligations continue to apply.

source · facts: F31,F37
upstream-risk 2026-06-23

FAR Overhaul proposed rule could renumber CMMC anchor provisions

The proposed "FAR Overhaul" rule (FR doc 2026-12559) covers FAR Parts 1, 2, 4, 39, 40, and 53 and mentions CMMC. If finalized it could relocate FAR 4.1901 (the FCI definition) and 52.204-21 (the Level 1 requirement set). Proposed only — current text unchanged.

· facts: F04,F06,F33
enforcement 2026-06-18

DOJ FCA settlement: self-scored 110, DIBCAC-assessed -170

LOGZONE Inc. agreed to pay $507,144 to resolve False Claims Act liability over cybersecurity misrepresentations — a self-assessed perfect 110 SPRS score against a DIBCAC assessment of negative 170. Affirmations are legal representations.

· facts: F35