The Pentagon launches a review of CMMC

Summary

---

The Pentagon Launches a Review of CMMC

The Daily Scoop Podcast — July 17, 2026
Host: Billy Mitchell

---

Episode Overview

This episode focuses on the Pentagon’s decision to pause the upcoming Cybersecurity Maturity Model Certification (CMMC) phase two requirements and initiate a comprehensive program review. Host Billy Mitchell breaks down the motivations behind the freeze, its implications for defense contractors, and the establishment of a new CMMC Reform Task Force. The episode also briefly covers the latest developments in the Department of Energy’s Genesis Mission Consortium, including Scale AI joining as a key private sector partner.

---

Key Discussion Points & Insights

1. Pentagon Freezes Forthcoming CMMC Requirements

(00:20 - 01:20)

• The Pentagon has issued an immediate freeze on upcoming CMMC cybersecurity requirements after government research showed the policy might “drive many businesses out of the defense industrial base at a time when US military urgently needs their innovations.”
• Senior DoD officials Kirsten Davies (Chief Information Officer) and Michael Duffy (Undersecretary of Defense for Acquisition and Sustainment) announced the suspension of phase two requirements, which were scheduled to take effect November 10, 2026.

Notable Quote:

"The Pentagon has placed an immediate freeze on forthcoming cybersecurity requirements after government research suggested that policy would drive many businesses out of the defense industrial base at a time when US Military urgently needs their innovations."
— Billy Mitchell (00:22)

2. Launch of the CMMC Reform Task Force

(01:00 - 01:40)

• A CMMC Reform Task Force has been established to review the entire CMMC program and submit recommendations within 60 days.
• The DoD also released a Request for Information to gather stakeholder feedback on both the freeze and ongoing compliance challenges.
• Contractors had been working quickly to obtain third-party assessments ahead of the enforcement date, highlighting the pause’s significant operational impact.

Notable Quote:

"A new CMMC Reform Task Force has been stood up to conduct a review of the entire program and submit a report of its findings and recommendations within the next 60 days."
— Billy Mitchell (01:10)

3. Phased Implementation of CMMC

(01:30 - 02:20)

• DoD’s original CMMC rollout:
  • Phase 1 (Nov 2025): Self-assessments under CMMC Levels 1 and 2.
  • Phase 2 (Planned Nov 2026): Required certified third-party assessment for Level 2 before contract awards.
  • Phase 3 (Nov 2027): Introduction of Level 3 assessments by the Defense Industrial Base Cybersecurity Assessment Center.
• During the interim, enforcement relies on NIST SP 800-171 Revision 2 standards through self-assessments and select government-led evaluations.

Notable Quote:

“Phase two was expected to kick off in November this year and would have forced companies to achieve CMMC level 2 by passing an assessment from a certified third party assessment organization in order to receive contract awards.”
— Billy Mitchell (01:50)

4. Scale AI Joins DOE's Genesis Mission Consortium

(02:25 - 03:10)

• Scale AI becomes the newest private sector partner in the Department of Energy's Genesis Mission Consortium, a collaborative hub fostering innovation in AI for energy and federal missions.
• Other recent partners: Emerald AI, SambaNova Systems, Accenture, Amazon Web Services, Databricks, and IBM.
• A Scale AI spokesperson noted the company’s ongoing work on “high quality evaluation benchmarks, preparing data for advanced AI systems, developing AI agents for complex workflows, and supporting computer vision and robotics applications.”

Notable Quote:

"Scale's contribution to the Genesis mission builds on the work we've been doing for years, creating high quality evaluation benchmarks, preparing data for advanced AI systems, developing AI agents for complex workflows, and supporting computer vision and robotics applications."
— Scale AI spokesperson (02:55)

---

Memorable Moments

• The Pentagon's freeze was prompted by concrete research—signifying DoD’s willingness to recalibrate policy in response to industry concerns.
• The tight, 60-day reporting window for the CMMC Reform Task Force demonstrates the urgency in reevaluating compliance standards while ensuring national security needs are met.
• Expansion of the DOE’s Genesis Mission Consortium highlights the federal government’s increasing reliance on public-private partnerships to accelerate technological advancements.

---

Important Timestamps

• 00:20 — Pentagon announces freeze on CMMC requirements
• 01:00 — CMMC Reform Task Force established
• 01:30 — Breakdown of original CMMC implementation plan and the interim enforcement approach
• 02:25 — Scale AI joins DOE Genesis Mission Consortium; remarks from Scale AI spokesperson

---

Tone & Style

• The tone is brisk, no-nonsense, and news-forward, in line with the podcast’s focus on “the latest news and trends facing government leaders.”
• Quotes are authoritative, reflecting the voices of both the host and official spokespersons.

---

In Summary

This episode provides a concise yet comprehensive overview of the Pentagon’s decision to halt and reassess CMMC phase two requirements amidst industry pushback, framing it as a pivotal move for government contractors and national security policy. It also gives a quick update on the Department of Energy’s continued drive for innovation through the Genesis Mission Consortium, spotlighting the latest private sector collaborations.

---

Transcript

[A]

Today on the Daily Scoop Podcast from the Scoop News Group, the Pentagon launches a review of CMMC and another startup joins Energy's Genesis Mission consortium it's Friday, July 17, 2026. Welcome to the Daily Scoop Podcast where you'll hear the latest news and trends facing government leaders. I'm the host of the Daily Scoop Podcast, Billy Mitchell. Thanks so much for joining me. And now let's dive into the day's top headlines. The Pentagon has placed an immediate freeze on forthcoming cybersecurity requirements after government research suggested that policy would drive many businesses out of the defense industrial base at a time when US Military urgently needs their innovations. Pentagon Chief Information Officer Kirsten Davies and Undersecretary of Defense for Acquisition and Sustainment Michael Duffy unveiled plans earlier this week to suspend the much anticipated Cybersecurity Maturity model certification phase two requirements that were set to take place on November 10th. A new CMMC Reform Task Force has been stood up to conduct a review of the entire program and submit a report of its findings and recommendations within the next 60 days. This major pause comes as contractors have been hustling to obtain third party assessments of their CMMC compliance in preparation for that near term enforcement date. With that, the Pentagon released a new request for Information to garner stakeholders its feedback on the move and associated compliance challenges. The CMMC Reform Task Force will analyze the responses as part of its upcoming review of the program. The Defense Department originally planned to introduce CMMC requirements through a three year implementation plan. Phase one began in November 2025 and required self assessments under CMMC level one and level two. Phase two was expected to kick off in November this year and would have forced companies to achieve CMMC level 2 by passing an assessment from a certified third party assessment organization in order to receive contract awards. Phase three would have followed in November 2027, introducing level three defense industrial based Cybersecurity Assessment center assessments during the interim period as senior leaders figure out the best path ahead. They said that DoD will enforce cybersecurity compliance with NIST Special Publication 8 Revision 2 standards through self assessments and select government led assessments. Now moving on to other news, Scale AI is joining the Department of Energy's Genesis Mission Consortium, serving as the collaborative hub for working groups and structured partnerships. The vendor shared with FedScoop prior to its announcement on Thursday. The technology provider is the latest private sector partner to join DOE's Genesis mission consortium as the agency continues building up its roster. Emerald AI and Samba Nova Systems have also jumped on board in recent weeks for Scale AI. The partnership represents a further expansion of its role in the Genesis mission and comes after it signed a memorandum of understanding earlier this year, a Scale AI spokesperson told FedScoop. Quote Scale's contribution to the Genesys mission builds on the work we've been doing for years, creating high quality evaluation benchmarks, preparing data for advanced AI systems, developing AI agents for complex workflows, and supporting computer vision and robotics applications. DOE launched the consortium in February as a way to deepen public private partnerships that it believes will fuel the larger initiative. Scale AI joins the likes of Accenture, Amazon Web Services, Databricks and IBM. For more news at the intersection of the federal government and technology, make sure to visit fedscoop.com. Thanks so much for tuning in to another episode of the Daily Scoop Podcast, available on all podcast platforms. If you've already rated the podcast on your platform of choice, thanks so much. High ratings and good reviews of the show help more people to find it. The Daily Scoop Podcast is a production of the Scoop News Group in Washington, D.C. carlin Fisher helped put the show together and the entire Scoop News Group team contributes. We'll be back next week week with more top headlines. Until then, I'm your host Billy Mitchell. Thanks so much for listening.