CMMC Phase 2 Deadline Sparks Urgency as Assessor Shortage Looms
Event summary
- CyberSheath opens registration for CMMC CON 2026, a free virtual conference on Sept. 23-24, 2026.
- Phase 2 of the CMMC program mandates third-party assessments for defense contracts starting Nov. 10, 2026.
- Only 103 authorized C3PAOs are available to assess 80,000 organizations requiring Level 2 certification.
- Conference focuses on practical guidance for contractors to achieve compliance before the deadline.
The big picture
The CMMC Phase 2 deadline is creating a bottleneck in the defense industrial base, with a severe shortage of authorized assessors. This conference highlights the urgency for contractors to secure assessments before the November deadline, reflecting broader trends in cybersecurity regulation and the increasing complexity of compliance for defense contractors. The event underscores the critical need for scalable solutions to manage the backlog and ensure timely certification.
What we're watching
- Assessor Capacity
- Whether the current 103 C3PAOs can handle the demand from 80,000 organizations needing certification.
- Compliance Timelines
- The pace at which defense contractors can achieve compliance before the Nov. 10, 2026 deadline.
- Regulatory Enforcement
- How strictly the CMMC program will enforce compliance and the potential impact on contract awards.