The Pentagon Paused Its Cybersecurity Certification. Contractors Are Still Getting Sued.
In July 2026 the Pentagon paused the requirement for defense contractors to be certified by an outside assessor. But the cybersecurity scores contractors report themselves still count, and the Justice Department keeps settling cases over scores that were wrong. Whether to get assessed now or wait.
Why now
Paused on July 13, 2026
The requirement to hold a certification from an outside assessor, due to start in contracts on November 10, 2026, was suspended, and a 60-day task force was set up to review the program.
Assessments did not stop
Contractors can still choose to be assessed by an accredited outside firm. The pause was written into contracts by a formal Pentagon deviation dated September 3, 2026.
Honeywell: $2.04 million, September 2026
For NIST SP 800-171 gaps from April 2020 to December 2023. The whistleblower's share was $375,823.
A score of -170
LOGZONE paid $507,144 in June 2026 after the Pentagon's own auditors scored its security -170 on a scale that runs from -203 to 110.
What you will learn
Agenda
Who should attend
Defense contractors and subcontractors: compliance leads, CISOs, contracts managers and counsel.
Speakers
Speakers will be announced. The panel will include:
Virtual expo hall
When the session ends, the expo hall opens for an hour. Step into a sponsor's booth in a new tab to watch their short session and pick up their resources, then come back to the main stage whenever you like.