# CMMC Phase II Suspension: What It Means for MSPs and Compliance Risks Ahead
The Cybersecurity Maturity Model Certification (CMMC) Phase II implementation has been suspended, creating uncertainty for managed service providers and organizations subject to Department of Defense cybersecurity requirements. The suspension leaves MSPs and defense contractors without clear guidance on compliance timelines and assessment requirements, potentially creating gaps in security posture during the interim period.
