The Pentagon paused CMMC Phase II, but cybersecurity requirements remain. Here's what the decision really means for defense ...