Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Rising SPRS scores mask declining CMMC confidence across US defense contractors

Trend
First reported
Last updated
Happening score
H score 22
1 unique sources, 1 articles

Summary

Hide ▲

US defense contractors and subcontractors are posting a five-year high in SPRS self-assessment scores while confidence in those scores is falling, widening a CMMC readiness gap across the DIB. The trust decline suggests self-reported compliance may be outpacing verified cybersecurity maturity. Only 65% of respondents said their score was accurate, down from 89% last year and 94% in 2024. Just 1% said they are completely prepared for CMMC certification.

Related Happenings

US Department of Defense (DoD) Cybersecurity Maturity Model Certification (CMMC) Phase II Suspended the Phase II requirements pending review and announced a 60-day program review

Public Sector Action
H score67 First: 14.07.2026 18:28 Last: 14.07.2026 18:28 Sources 1

About this happening: The US Department of Defense suspended CMMC Phase II requirements pending review, delaying a planned November 10, 2026 compliance step for defense contractors and su...

Open Happening

Pentagon suspends CMMC phase two for 60-day review

Public Sector Action
H score24 First: 14.07.2026 09:37 Last: 14.07.2026 09:37 Sources 1

About this happening: The Pentagon suspended CMMC phase two and opened a 60-day review, delaying new certification requirements for defense contractors and subcontractors. The pause...

Open Happening

Timeline

  1. 20.08.2026 15:40 2 articles · 2h ago

    US defense contractors report rising SPRS scores as confidence falls

    Industry Or Public Sector Update

    CyberSheath's 2026 State of the DIB Report found that US defense industrial base contractors posted a five-year high average Supplier Performance Risk System (SPRS) score of +51, up from +33 in 2025, while confidence in score accuracy fell to 65% and only 1% of contractors said they were completely prepared for CMMC certification. The report is based on a survey of 302 US defense contractors conducted by Merrill Research in May 2026, and it comes against the backdrop of CMMC Phase II being suspended by the Trump administration in July 2026 after it had been scheduled to take effect on November 10, 2026.

    Show sources
    Open in new tab