Category: Cybersecurity Audits

Question we hear weekly · Updated August 2026 Short answer: the CMMC Level 2 pause means fewer scheduled assessments — not fewer obligations. Your DFARS clauses are still in force, your SPRS self-assessment is still a certification to the U.S. Government, and the DOJ fined a contractor $507,144 in June 2026 over exactly this scenario. […]

Enforcement tracker · Updated August 2026 · All figures from DOJ announcements and public reporting Since the DOJ launched its Civil Cyber-Fraud Initiative in October 2021, cybersecurity has become one of the fastest-growing uses of the False Claims Act — the fraud statute with treble damages, per-invoice penalties and 15–30% whistleblower bounties. Here is every […]