Defense contractors' CMMC confidence rises while proof of compliance lags
Trend
Summary
Hide ▲
Show ▼
Across the defense industrial base, defense contractors are becoming more confident in CMMC/SPRS compliance even as their ability to prove it remains weak, widening a verification gap that affects procurement and legal exposure. A recent survey of 273 contractors found 96% confidence in self-attested scores but only 29% with the evidence needed to back them up. A second survey showed the same pattern over a longer horizon, with SPRS scores improving while confidence in their accuracy fell.
Related Happenings
Rising SPRS scores mask declining CMMC confidence across US defense contractors
Trend
H score22
First: 20.08.2026 15:40
Last: 20.08.2026 15:40
Sources 1
How related:
The average SPRS score climbed to a five-year high of +51, up from +33 in 2025 against a perfect possible score of 110. But confidence that those scores were accurate fell sharply: 65% of contractors said they were extremely or very confident, down from 89% a year earlier and 94% in 2024.
About this happening:
US defense contractors and subcontractors are posting a five-year high in SPRS self-assessment scores while confidence in those scores is falling, widening a CMMC re...
Rising SPRS scores mask declining CMMC confidence across US defense contractors
TrendHow related: The average SPRS score climbed to a five-year high of +51, up from +33 in 2025 against a perfect possible score of 110. But confidence that those scores were accurate fell sharply: 65% of contractors said they were extremely or very confident, down from 89% a year earlier and 94% in 2024.
About this happening: US defense contractors and subcontractors are posting a five-year high in SPRS self-assessment scores while confidence in those scores is falling, widening a CMMC re...
US Department of Defense (DoD) Cybersecurity Maturity Model Certification (CMMC) Phase II Suspended the Phase II requirements pending review and announced a 60-day program review
Public Sector Action
H score67
First: 14.07.2026 18:28
Last: 14.07.2026 18:28
Sources 1
About this happening:
The US Department of Defense suspended CMMC Phase II requirements pending review, delaying a planned November 10, 2026 compliance step for defense contractors and su...
US Department of Defense (DoD) Cybersecurity Maturity Model Certification (CMMC) Phase II Suspended the Phase II requirements pending review and announced a 60-day program review
Public Sector ActionAbout this happening: The US Department of Defense suspended CMMC Phase II requirements pending review, delaying a planned November 10, 2026 compliance step for defense contractors and su...
Pentagon suspends CMMC phase two for 60-day review
Public Sector Action
H score24
First: 14.07.2026 09:37
Last: 14.07.2026 09:37
Sources 1
About this happening:
The Pentagon suspended CMMC phase two and opened a 60-day review, delaying new certification requirements for defense contractors and subcontractors. The pause...
Pentagon suspends CMMC phase two for 60-day review
Public Sector ActionAbout this happening: The Pentagon suspended CMMC phase two and opened a 60-day review, delaying new certification requirements for defense contractors and subcontractors. The pause...
Timeline
-
21.08.2026 11:41 2 articles · 2h ago
Defense contractors' CMMC confidence rises faster than proof
Industry Or Public Sector UpdateTwo defense-industry surveys show contractors becoming more confident in CMMC and SPRS compliance even as they struggle to substantiate those claims. A Kiteworks survey of 273 defense contractors taken after the Pentagon’s July suspension of CMMC 2.0 Phase 2 third-party assessments found 96% confidence in self-attested SPRS scores but only 29% with both a current SPRS submission and a FedRAMP-authorized platform, while 84% worried about False Claims Act liability and 92% had already added legal or compliance review. CyberSheath and Merrill Research’s 2026 State of the DIB Report found average SPRS scores at a five-year high of +51, but confidence in score accuracy down to 65% and only 1% fully prepared for CMMC certification.
Show sources
- Contractors’ CMMC Confidence Rises as Ability to Prove It Falls Behind — www.securityweek.com — 21.08.2026 11:41
- Contractors’ CMMC Confidence Rises as Ability to Prove It Falls Behind — www.securityweek.com — 21.08.2026 11:41