Hard to know if this is a good decision or not. It could very well be that they had just built too much bureaucracy into the process and it needed to be stripped down a bit. Or, given the way things work now, it might just be that they couldn't contract with some of their cronies under the new rules.

It pauses the third party audit aspect. But if the contract requires NIST 800-171 compliance then nothing changes.