Blog

The Department of War recently announced a pause in the implementation of CMMC Phase 2 certification audits, creating questions and uncertainty across the Defense Industrial Base. While the third-party certification process is being delayed, one thing remains clear: the underlying cybersecurity and compliance requirements have not changed.

For defense contractors handling Controlled Unclassified Information (CUI), this announcement should not be interpreted as a reduction in compliance obligations. Requirements including DFARS 252.204-7012, NIST SP 800-171, SPRS score reporting, annual affirmations, and cyber incident reporting remain fully in effect.

Your IT Team + LaScala’s MDR = Unbeatable Cyber Defense

In today’s threat-heavy digital landscape, businesses face a constant barrage of cyber risks—from ransomware and phishing to insider threats and cloud vulnerabilities. For organizations seeking robust protection without the burden of building a full-scale internal security team, Managed Detection & Response (MDR) from LaScala offers a powerful solution.

As a leading MSSP (Managed Security Services Provider), LaScala delivers co-managed security that blends your internal IT expertise with our advanced threat intelligence, 24/7 monitoring, and rapid incident response capabilities. Whether you're searching for a “cybersecurity company near me” or evaluating the best managed security service provider, LaScala’s MDR service stands out for its flexibility, transparency, and effectiveness.

Big changes are coming to the defense contracting world.

Starting November 10, 2025, the Department of Defense (DoD) will officially begin including CMMC (Cybersecurity Maturity Model Certification) requirements in contracts, RFPs, and RFIs through the DFARS 7021 clause. This marks a major shift in how cybersecurity compliance is enforced across the defense industrial base.

Here’s what you need to know:

In today’s rapidly evolving threat landscape, it’s not a matter of if but when a vulnerability will be exploited. While your co-managed security model provides a powerful layer of defense, even the best partnership can leave dangerous gaps without a robust vulnerability management strategy.

So, are you confident your team can keep up?

If a third-party vendor fails to meet compliance standards, your organization bears the liability—and the fallout can be catastrophic. LaScala empowers organizations to build robust TPRM programs that seamlessly align with regulations like SOC 2, GDPR, HIPAA, and DORA.