SMOKEJUMPER | CMMC CURRENT POLICY NOTE | November 6, 2026
The attached guide/workbook are the dated October 2026 planning edition. This note accompanies them.
CMMC is still a thing. Know what your contract requires now.
Phase II rollout is suspended. Applicable Phase I self-assessment and safeguarding requirements remain. The September 3, 2026 Revision 3 class deviation carries forward the self-assessment directions and NIST SP 800-171 Revision 2 baseline under DFARS 252.204-7012. Affected solicitations and contracts change through actual amendments/modifications: have your contracts and security leads verify what applies to your work.
Do not treat the former November 10, 2026 Phase II date as an active certification deadline. No replacement start date was verified in this bounded review.
Official September memo: https://www.acq.osd.mil/dpap/dars/classdev/DFARS_RFO/Part-240/2026-O0025_Rev3_TAB_A_Deviation_Memo.pdf
Current program: https://dowcio.war.gov/CMMC/About/
Planning assessment: https://smokejumper.ai/cmmc/assessment/
Review priorities with Dan: https://calendly.com/smokejumper/20min
These planning resources do not determine official CMMC status or produce an SPRS score. No confidential information or security evidence should be entered into a public form. Requirements can change; verify current primary guidance and your actual contract before acting.