United States – October 20, 2026 -- CloudFit said the Department of War's pause on parts of the CMMC rollout does not change cybersecurity obligations for the more than 220,000 organizations in the Defense Industrial Base (DIB) that are entrusted with protecting Controlled Unclassified Information (CUI).