The Department of Defense in Julysuspended CMMC’s second phase, saying its requirement for independent third-party reviews would have cost companies too much. But the first phase remains in effect, and companies are still struggling to meet those standards, much as they havefor the past few years.