Defense Industrial Base
Compliance Status Tracker
Where the regulations that govern defense contractors stand right now, dated and sourced. ISI monitors each one and updates this page as it moves.
Published
| Regulation | Status | As of | Where things stand | Next milestone | Source |
|---|---|---|---|---|---|
| CMMC Cybersecurity Maturity Model Certification (CMMC 2.0), 32 CFR Part 170 Full status, history and FAQs | Suspended | The Department of War suspended all pending and future CMMC 2.0 implementation milestones on July 13, 2026. Level 1 and Level 2 self-assessments are still required. | Department of War Reviewed | ||
| FOCI Defense Federal Acquisition Regulation Supplement: Mitigating Risks Related to Foreign Ownership, Control, or Influence Full status, history and FAQs | Proposed | On May 7, 2026, a proposed rule to expand FOCI requirements to defense contracts (cleared and uncleared) worth more than $5 million, including subcontracts. | Department of War Reviewed | ||
| FAR Part 40 40.304 Controlled Unclassified Information Full status, history and FAQs | Proposed | On June 23, 2026, the FAR Part 40 amendment was published into the Federal Register, including a section on CUI which would create a unified standard across federal agencies. | FAR Council Reviewed |
What moved, and what's next
Material changes ISI has logged in the last six months sit left of today. Expected dates sit to the right, each marked with how firm the date is.
- 1 FOCI Logged Proposed FOCI expansion rule published into the Federal Register. Status set to Proposed
- 2 FAR Part 40 Logged Proposed CUI inclusion in FAR Part 40, part of the Revolutionary FAR Overhaul initiative. Status set to Proposed
- 3 CMMC Logged Department of War suspends CMMC Phase II and all pending implementation milestones Status set to Suspended
- 4 CMMC Expected Task force report delivered to CIO Expected
- 5 FOCI Expected Final Rule Publication Expected
- 6 FAR Part 40 Expected Final Rule Publication Estimated
Recent material updates
-
CMMC
Department of War suspends CMMC Phase II and all pending implementation milestones
Status set to Suspended Full history -
FAR Part 40
Proposed CUI inclusion in FAR Part 40, part of the Revolutionary FAR Overhaul initiative.
Status set to Proposed Full history -
FOCI
Proposed FOCI expansion rule published into the Federal Register.
Status set to Proposed Full history
How to read this page. Status is the legal position today, and As of is the date it began. Last reviewed moves every time ISI confirms the status is still accurate, whether or not anything changed.
Find out which of these touches your contracts
ISI's advisors work with defense contractors at every tier. A short call sorts out what applies to you and what to do about it this quarter.