Skip to content
Trustalis
ApproachConsultingEngagement ModelsFrameworksResourcesAboutCapability StatementTalk to us
  1. Home
  2. /Resources
Insights

Resources

Practical guidance on compliance, risk, and security leadership from senior practitioners.

  • All
  • CMMC & Defense
  • SOC 2 & ISO 27001
  • vCISO & Security Leadership
  • Risk & Third-Party
  • HIPAA & Privacy
Dark layered architectural forms with a vermillion accent line marking a protected information boundary
CMMC & Defense

CMMC Compliance in 2026: What Level 2 Requires While Phase 2 Is Paused

CMMC compliance at Level 2 still means all 110 NIST SP 800-171 requirements. What the Phase 2 pause actually changed, what it did not, and how to scope and budget the work.

Last updated November 13, 2026

Trustalis

Governance, risk, and compliance consulting. Advice from senior practitioners, programs that run in daily operations, and evidence that holds up under review.

[email protected]

Consulting

  • GRC Strategy & Advisory
  • Risk Assessment
  • Compliance Programs
  • Audit Readiness
  • vCISO / Fractional CISO
  • CMMC / NIST SP 800-171

Company

  • Approach
  • Engagement Models
  • Frameworks
  • About
  • Resources
  • Capability Statement
  • Contact
  • Field-Tested GRC Academy (opens in a new tab)

Trust

  • Security
  • Privacy Policy
  • Terms of Use

Latest resources

  • CMMC Compliance in 2026: What Level 2 Requires While Phase 2 Is Paused

Have a requirement in front of you?

Talk to a practitioner

© 2026 Trustalis LLC. All rights reserved.

Trustalis provides advisory and readiness services. Certifications, PCI DSS Reports on Compliance, and CMMC certification assessments are issued by the appropriately accredited bodies.