CMMC Phase II Is Suspended — But Defense Contractors Are Not Excused From Cybersecurity