CINXE.COM
Cybersecurity Directives | CISA
<!DOCTYPE html> <html lang="en" dir="ltr" prefix="og: https://ogp.me/ns#" class="no-js"> <head> <meta charset="utf-8" /> <link rel="canonical" href="https://www.cisa.gov/news-events/directives" /> <meta property="og:site_name" content="Cybersecurity and Infrastructure Security Agency CISA" /> <meta property="og:type" content="website" /> <meta property="og:url" content="https://www.cisa.gov/news-events/directives" /> <meta property="og:title" content="Cybersecurity Directives | CISA" /> <meta name="Generator" content="Drupal 10 (https://www.drupal.org)" /> <meta name="MobileOptimized" content="width" /> <meta name="HandheldFriendly" content="true" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="icon" href="/profiles/cisad8_gov/themes/custom/gesso/favicon.png" type="image/png" /> <title>Cybersecurity Directives | CISA</title> <link rel="stylesheet" media="all" href="/core/misc/components/progress.module.css?srooad" /> <link rel="stylesheet" media="all" href="/core/misc/components/ajax-progress.module.css?srooad" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/align.module.css?srooad" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/fieldgroup.module.css?srooad" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/container-inline.module.css?srooad" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/clearfix.module.css?srooad" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/details.module.css?srooad" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/hidden.module.css?srooad" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/item-list.module.css?srooad" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/js.module.css?srooad" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/nowrap.module.css?srooad" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/position-container.module.css?srooad" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/reset-appearance.module.css?srooad" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/resize.module.css?srooad" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-counter.css?srooad" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-report-counters.css?srooad" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/system-status-report-general-info.css?srooad" /> <link rel="stylesheet" media="all" href="/core/modules/system/css/components/tablesort.module.css?srooad" /> <link rel="stylesheet" media="all" href="/core/modules/views/css/views.module.css?srooad" /> <link rel="stylesheet" media="all" href="/modules/contrib/better_social_sharing_buttons/css/better_social_sharing_buttons.css?srooad" /> <link rel="stylesheet" media="all" href="/modules/contrib/ckeditor_accordion/css/accordion.frontend.css?srooad" /> <link rel="stylesheet" media="all" href="/modules/contrib/extlink/css/extlink.css?srooad" /> <link rel="stylesheet" media="all" href="/modules/contrib/paragraphs/css/paragraphs.unpublished.css?srooad" /> <link rel="stylesheet" media="all" href="/profiles/cisad8_gov/modules/custom/toolbar_tasks/css/toolbar.css?srooad" /> <link rel="stylesheet" media="all" href="//fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700&family=Public+Sans:wght@400;500;600;700&display=swap" /> <link rel="stylesheet" media="all" href="/profiles/cisad8_gov/themes/custom/gesso/dist/css/styles.css?srooad" /> <script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","pathPrefix":"","currentPath":"node\/16233","currentPathIsAdmin":false,"isFront":false,"currentLanguage":"en"},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"gtag":{"tagId":"","consentMode":false,"otherIds":[],"events":[],"additionalConfigInfo":[]},"ajaxPageState":{"libraries":"eJxdju1uwzAIRV_IjR_JwoY6XoiJAPfj7Wd1TaftzxXnCNDN5E6aTEoDTraCtl5THu7SLZo_eXIoG2Fz0QSliGKTHj_TclXpTh0DPXxubxF1HMDLG0MVqUzJocY64z8v8AWPv3IPddgdLWYlwKJjz6epLBn4pJ36SNaQMujpnMBIwwEKVeFY7ezza5bRj5G52UoY7GlOe8zzKrgIz1ezhm3z0w-FYVfCKrf0Lgkd-OmtWGQBvHzwUrCHW6O7xVcuu-Bg-gZpoIuu","theme":"guswds","theme_token":null},"ajaxTrustedUrl":[],"gtm":{"tagId":null,"settings":{"data_layer":"dataLayer","include_classes":false,"allowlist_classes":"","blocklist_classes":"","include_environment":false,"environment_id":"","environment_token":""},"tagIds":["GTM-53QLXSL9"]},"data":{"extlink":{"extTarget":false,"extTargetAppendNewWindowLabel":"(opens in a new window)","extTargetNoOverride":false,"extNofollow":false,"extTitleNoOverride":false,"extNoreferrer":false,"extFollowNoOverride":false,"extClass":"ext","extLabel":"(link is external)","extImgClass":false,"extSubdomains":true,"extExclude":"(.\\.gov$)|(.\\.mil$)|(.\\.mil\/)|(.\\.gov\/)","extInclude":"","extCssExclude":".c-menu--social,.c-menu--footer,.c-social-links,.c-text-cta--button,.usa-footer__contact-info","extCssInclude":"","extCssExplicit":"","extAlert":true,"extAlertText":"You are now leaving an official website of the United State Government (USG), the Department of Homeland Security (DHS) and the Cybersecurity and Infrastructure Security Agency (CISA). Links to non-USG, non-DHS and non-CISA sites are provided for the visitor\u0027s convenience and do not represent an endorsement by USG, DHS or CISA of any commercial or private issues, products or services. Note that the privacy policy of the linked site may differ from that of USG, DHS and CISA.","extHideIcons":false,"mailtoClass":"mailto","telClass":"","mailtoLabel":"(link sends email)","telLabel":"(link is a phone number)","extUseFontAwesome":false,"extIconPlacement":"append","extPreventOrphan":false,"extFaLinkClasses":"fa fa-external-link","extFaMailtoClasses":"fa fa-envelope-o","extAdditionalLinkClasses":"","extAdditionalMailtoClasses":"","extAdditionalTelClasses":"","extFaTelClasses":"fa fa-phone","whitelistedDomains":[],"extExcludeNoreferrer":""}},"ckeditorAccordion":{"accordionStyle":{"collapseAll":1,"keepRowsOpen":0,"animateAccordionOpenAndClose":1,"openTabsWithHash":1}},"user":{"uid":0,"permissionsHash":"0f75d40308887aebba0d5b0d2671305b73c9431902f86e672380a6dc6ab97d07"}}</script> <script src="/core/misc/drupalSettingsLoader.js?v=10.4.1"></script> <script src="/modules/contrib/google_tag/js/gtag.js?srooad"></script> <script src="/modules/contrib/google_tag/js/gtm.js?srooad"></script> <script src="https://dap.digitalgov.gov/Universal-Federated-Analytics-Min.js?agency=DHS&subagency=CISA&yt=true" id="_fed_an_ua_tag" async></script> </head> <body class="path-node not-front node-page node-page--node-type-landing-page" id="top"> <div class="c-skiplinks"> <a href="#main" class="c-skiplinks__link u-visually-hidden u-focusable">Skip to main content</a> </div> <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-53QLXSL9" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript> <div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas> <div class="l-site-container"> <section class="usa-banner" aria-label="Official government website"> <div class="usa-accordion"> <header class="usa-banner__header"> <div class="usa-banner__inner"> <div class="grid-col-auto"> <img class="usa-banner__header-flag" src="/profiles/cisad8_gov/themes/custom/gesso/dist/images/us_flag_small.png" alt="U.S. flag" /> </div> <div class="grid-col-fill tablet:grid-col-auto"> <p class="usa-banner__header-text">An official website of the United States government</p> <p class="usa-banner__header-action" aria-hidden="true">Here’s how you know</p></div> <button class="usa-accordion__button usa-banner__button" aria-expanded="false" aria-controls="gov-banner"> <span class="usa-banner__button-text">Here’s how you know</span> </button> </div> </header> <div class="usa-banner__content usa-accordion__content" id="gov-banner"> <div class="grid-row grid-gap-lg"> <div class="usa-banner__guidance tablet:grid-col-6"> <img class="usa-banner__icon usa-media-block__img" src="/profiles/cisad8_gov/themes/custom/gesso/dist/images/icon-dot-gov.svg" alt="Dot gov"> <div class="usa-media-block__body"> <p> <strong>Official websites use .gov</strong> <br> A <strong>.gov</strong> website belongs to an official government organization in the United States. </p> </div> </div> <div class="usa-banner__guidance tablet:grid-col-6"> <img class="usa-banner__icon usa-media-block__img" src="/profiles/cisad8_gov/themes/custom/gesso/dist/images/icon-https.svg" alt="HTTPS"> <div class="usa-media-block__body"> <p> <strong>Secure .gov websites use HTTPS</strong> <br> A <strong>lock</strong> (<span class="icon-lock"><svg xmlns="http://www.w3.org/2000/svg" width="52" height="64" viewBox="0 0 52 64" class="usa-banner__lock-image" role="img" aria-labelledby="banner-lock-title banner-lock-description"><title id="banner-lock-title">Lock</title><desc id="banner-lock-description">A locked padlock</desc><path fill="#000000" fill-rule="evenodd" d="M26 0c10.493 0 19 8.507 19 19v9h3a4 4 0 0 1 4 4v28a4 4 0 0 1-4 4H4a4 4 0 0 1-4-4V32a4 4 0 0 1 4-4h3v-9C7 8.507 15.507 0 26 0zm0 8c-5.979 0-10.843 4.77-10.996 10.712L15 19v9h22v-9c0-6.075-4.925-11-11-11z"/></svg></span>) or <strong>https://</strong> means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites. </p> </div> </div> </div> </div> </div> </section> <div class="c-block c-global-header-btns c-global-btns"> <div class="l-constrain l-constrain"> <div class="c-block__content"> <div id="block-globalbuttons" class="c-block c-block--provider-block-content c-block--id-block-content83069f9f-34fc-4d54-86ec-936a204f8088"> <div class="c-block__content"> <div class="c-field c-field--name-body c-field--type-text-with-summary c-field--label-hidden"> <div class="c-field__content"><p><a class="c-button c-button--basic c-button--blue" href="/resources-tools/resources/free-cybersecurity-services-and-tools" title="Free Cyber Services">Free Cyber Services</a><a class="c-button c-button--basic c-button--green60" href="/securebydesign">Secure by design </a><a class="c-button c-button--basic c-button--teal" href="/node/18883">Secure Our World</a><a class="c-button c-button--campaign" href="/node/8056">Shields Up</a><a class="c-button c-button--report" href="/report">Report A Cyber Issue</a></p></div></div> </div> </div> </div> </div> </div> <div class="usa-overlay"></div> <header class="usa-header usa-header--extended" role="banner"> <div class="usa-navbar"> <div class="l-constrain"> <div class="usa-navbar__row"> <div class="c-block c-site-header"> <div class="l-constrain"> <div class="c-block__content"> <div id="block-guswds-cisaheaderblock" class="c-block c-block--provider-block-content c-block--id-block-contentbc4e6844-86b4-4e20-b163-a73bda3d1d76"> <div class="c-block__content"> <div class="c-field c-field--name-body c-field--type-text-with-summary c-field--label-hidden"> <div class="c-field__content"><a href="/"><img src = "/sites/default/files/images/SVG/header_logo_tagline_update.svg" alt="Cybersecurity & Infrastructure Security Agency logo America’s Cyber Security Defense Agency National Coordinator For Critical Infrastructure Security and Resilience"/><img class="print-only" src = "/sites/default/files/images/SVG/header_logo_tagline_update.png" alt="Cybersecurity & Infrastructure Security Agency logo America’s Cyber Security Defense Agency National Coordinator For Critical Infrastructure Security and Resilience"/></a></div></div> </div> </div> </div> </div> </div> <div class="c-block c-site-header-mobile"> <div class="l-constrain"> <div class="c-block__content"> <div id="block-guswds-cisaheaderblockmobile" class="c-block c-block--provider-block-content c-block--id-block-content283396c9-cd36-4ce3-b1e2-9b5576ab4f50"> <div class="c-block__content"> <div class="c-field c-field--name-body c-field--type-text-with-summary c-field--label-hidden"> <div class="c-field__content"><a href="/"><img src = "/sites/default/files/images/SVG/mobile_logo_wordmark.svg" alt="CISA Logo"/></a></div></div> </div> </div> </div> </div> </div> <div class="usa-navbar__search"> <div class="usa-navbar__search-header"> <p>Search</p> </div> <div class="usa-search"> <script async src=https://cse.google.com/cse.js?cx=ffc4c79e29d5b3a8c></script> <div class="gcse-searchbox-only" data-resultsurl="/search"> </div> </div> </div> <button class="mobile-menu-button usa-menu-btn">Menu</button> </div> </div> </div> <div class="c-block c-tagline-mobile"> <div class="l-constrain"> <div class="c-block__content"> <div id="block-guswds-mobiletaglinecontainer" class="c-block c-block--provider-block-content c-block--id-block-contentc8d12e9d-7e48-4708-90c1-563609c4b566"> <div class="c-block__content"> <div class="c-field c-field--name-body c-field--type-text-with-summary c-field--label-hidden"> <div class="c-field__content"><p><center><img src = "/sites/default/files/images/SVG/header_tagline_mobile_update.svg" alt = "America's Cyber Defense Agency" /></center></div></div> </div> </div> </div> </div> </div> <nav class="usa-nav" role="navigation" aria-label="Primary navigation"> <div class="usa-nav__inner l-constrain"> <div class="usa-nav__row"> <button class="usa-nav__close">Close</button> <div class="usa-search"> <script async src=https://cse.google.com/cse.js?cx=ffc4c79e29d5b3a8c></script> <div class="gcse-searchbox-only" data-resultsurl="/search"> </div> </div> <ul class="usa-nav__primary usa-accordion"> <li class="usa-nav__primary-item topics"> <button class="usa-accordion__button usa-nav__link " aria-expanded="false" aria-controls="basic-mega-nav-section-1"> <span>Topics</span> </button> <div id="basic-mega-nav-section-1" class="usa-nav__submenu usa-megamenu" hidden=""> <div class="usa-megamenu__parent-link"> <a href="/topics">Topics</a> </div> <div class="usa-megamenu__menu-items"> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/cybersecurity-best-practices"> <span>Cybersecurity Best Practices</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/cyber-threats-and-advisories"> <span>Cyber Threats and Advisories</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/critical-infrastructure-security-and-resilience"> <span>Critical Infrastructure Security and Resilience</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/election-security"> <span>Election Security</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/emergency-communications"> <span>Emergency Communications</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/industrial-control-systems"> <span>Industrial Control Systems</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/information-communications-technology-supply-chain-security"> <span>Information and Communications Technology Supply Chain Security</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/partnerships-and-collaboration"> <span>Partnerships and Collaboration</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/physical-security"> <span>Physical Security</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/topics/risk-management"> <span>Risk Management</span> </a> </div> </div> </div> <div class="c-menu-feature-links"> <div class="c-menu-feature-links__title"> <a href="/audiences"> How can we help? </a> </div> <div class="c-menu-feature-links__content"><a href="/topics/government">Government</a><a href="/topics/educational-institutions">Educational Institutions</a><a href="/topics/industry">Industry</a><a href="/topics/state-local-tribal-and-territorial">State, Local, Tribal, and Territorial</a><a href="/topics/individuals-and-families">Individuals and Families</a><a href="/topics/small-and-medium-businesses">Small and Medium Businesses</a><a href="/audiences/find-help-locally">Find Help Locally</a><a href="/audiences/faith-based-community">Faith-Based Community</a><a href="/audiences/executives">Executives</a><a href="/audiences/high-risk-communities">High-Risk Communities</a></div> </div> </div> </li> <li class="usa-nav__primary-item spotlight"> <a href="/spotlight" class="usa-nav__link" > <span>Spotlight</span> </a> </li> <li class="usa-nav__primary-item resources--tools"> <button class="usa-accordion__button usa-nav__link " aria-expanded="false" aria-controls="basic-mega-nav-section-3"> <span>Resources & Tools</span> </button> <div id="basic-mega-nav-section-3" class="usa-nav__submenu usa-megamenu" hidden=""> <div class="usa-megamenu__parent-link"> <a href="/resources-tools">Resources & Tools</a> </div> <div class="usa-megamenu__menu-items"> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/resources-tools/all-resources-tools"> <span>All Resources & Tools</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/resources-tools/services"> <span>Services</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/resources-tools/programs"> <span>Programs</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/resources-tools/resources"> <span>Resources</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/resources-tools/training"> <span>Training</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/resources-tools/groups"> <span>Groups</span> </a> </div> </div> </div> </div> </li> <li class="usa-nav__primary-item news--events"> <button class="usa-accordion__button usa-nav__link usa-current" aria-expanded="false" aria-controls="basic-mega-nav-section-4"> <span>News & Events</span> </button> <div id="basic-mega-nav-section-4" class="usa-nav__submenu usa-megamenu" hidden=""> <div class="usa-megamenu__parent-link"> <a href="/news-events">News & Events</a> </div> <div class="usa-megamenu__menu-items"> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/news-events/news"> <span>News</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/news-events/events"> <span>Events</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/news-events/cybersecurity-advisories"> <span>Cybersecurity Alerts & Advisories</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/news-events/directives"> <span>Directives</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/news-events/request-speaker"> <span>Request a CISA Speaker</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/news-events/congressional-testimony"> <span>Congressional Testimony</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/cisa-conferences"> <span>CISA Conferences</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/cisa-live"> <span>CISA Live!</span> </a> </div> </div> </div> </div> </li> <li class="usa-nav__primary-item careers"> <button class="usa-accordion__button usa-nav__link " aria-expanded="false" aria-controls="basic-mega-nav-section-5"> <span>Careers</span> </button> <div id="basic-mega-nav-section-5" class="usa-nav__submenu usa-megamenu" hidden=""> <div class="usa-megamenu__parent-link"> <a href="/careers">Careers</a> </div> <div class="usa-megamenu__menu-items"> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/careers/benefits-perks"> <span>Benefits & Perks</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/careers/hirevue-applicant-reasonable-accommodations-process"> <span>HireVue Applicant Reasonable Accommodations Process</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/general-recruitment-and-hiring-faqs"> <span>Hiring</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/careers/resume-application-tips"> <span>Resume & Application Tips</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/students-recent-graduates-employment-opportunities"> <span>Students & Recent Graduates</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/careers/veteran-and-military-spouse-employment-opportunities"> <span>Veteran and Military Spouses</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/careers/work-cisa"> <span>Work @ CISA</span> </a> </div> </div> </div> </div> </li> <li class="usa-nav__primary-item about"> <button class="usa-accordion__button usa-nav__link " aria-expanded="false" aria-controls="basic-mega-nav-section-6"> <span>About</span> </button> <div id="basic-mega-nav-section-6" class="usa-nav__submenu usa-megamenu" hidden=""> <div class="usa-megamenu__parent-link"> <a href="/about">About</a> </div> <div class="usa-megamenu__menu-items"> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/about/divisions-offices"> <span>Divisions & Offices</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/about/regions"> <span>Regions</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/about/leadership"> <span>Leadership</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/doing-business-cisa"> <span>Doing Business with CISA</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/site-links"> <span>Site Links</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/cisa-github"> <span>CISA GitHub</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/cisa-central"> <span>CISA Central</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/about/contact-us"> <span>Contact Us </span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/about/contact-us/subscribe-updates-cisa"> <span>Subscribe</span> </a> </div> </div> <div class="usa-col"> <div class="usa-nav__submenu-item"> <a href="/eeo-policies"> <span>Policies & Plans</span> </a> </div> </div> </div> </div> </li> </ul> <div class="c-block c-global-menu-btns c-global-btns"> <div class="c-block__content"> <div id="block-globalbuttons" class="c-block c-block--provider-block-content c-block--id-block-content83069f9f-34fc-4d54-86ec-936a204f8088"> <div class="c-block__content"> <div class="c-field c-field--name-body c-field--type-text-with-summary c-field--label-hidden"> <div class="c-field__content"><p><a class="c-button c-button--basic c-button--blue" href="/resources-tools/resources/free-cybersecurity-services-and-tools" title="Free Cyber Services">Free Cyber Services</a><a class="c-button c-button--basic c-button--green60" href="/securebydesign">Secure by design </a><a class="c-button c-button--basic c-button--teal" href="/node/18883">Secure Our World</a><a class="c-button c-button--campaign" href="/node/8056">Shields Up</a><a class="c-button c-button--report" href="/report">Report A Cyber Issue</a></p></div></div> </div> </div> </div> </div> </div> </div> </nav> </header> <div class="l-breadcrumb"> <div class="l-constrain"> <div class="l-breadcrumb__row"> <nav aria-labelledby="breadcrumb-label" class="c-breadcrumb" role="navigation"> <div class="l-constrain"> <div id="breadcrumb-label" class="c-breadcrumb__title u-visually-hidden">Breadcrumb</div> <ol class="c-breadcrumb__list"> <li class="c-breadcrumb__item"> <a class="c-breadcrumb__link" href="/">Home</a> </li> <li class="c-breadcrumb__item"> <a class="c-breadcrumb__link" href="/news-events">News & Events</a> </li> <li class="c-breadcrumb__item"> <span aria-current="page"> Cybersecurity Directives </span> </li> </ol> </div> </nav> <div id="block-bettersocialsharingbuttons" class="c-block c-block--social-share c-block--provider-better-social-sharing-buttons c-block--id-social-sharing-buttons-block"> <div class="c-block__content"> <div class="c-block__row"> <span>Share:</span> <div style="display: none"><link rel="preload" href="/modules/contrib/better_social_sharing_buttons/assets/dist/sprites/social-icons--no-color.svg" as="image" type="image/svg+xml" crossorigin="anonymous" /></div> <div class="social-sharing-buttons"> <a href="https://www.facebook.com/sharer/sharer.php?u=https://www.cisa.gov/news-events/directives&title=Cybersecurity%20Directives" target="_blank" title="Share to Facebook" aria-label="Share to Facebook" class="social-sharing-buttons-button share-facebook" rel="noopener"> <svg aria-hidden="true" width="18px" height="18px" style="border-radius:3px;"> <use href="/modules/contrib/better_social_sharing_buttons/assets/dist/sprites/social-icons--no-color.svg#facebook" /> </svg> </a> <a href="https://twitter.com/intent/tweet?text=Cybersecurity%20Directives+https://www.cisa.gov/news-events/directives" target="_blank" title="Share to X" aria-label="Share to X" class="social-sharing-buttons-button share-x" rel="noopener"> <svg aria-hidden="true" width="18px" height="18px" style="border-radius:3px;"> <use href="/modules/contrib/better_social_sharing_buttons/assets/dist/sprites/social-icons--no-color.svg#x" /> </svg> </a> <a href="https://www.linkedin.com/sharing/share-offsite/?url=https://www.cisa.gov/news-events/directives" target="_blank" title="Share to Linkedin" aria-label="Share to Linkedin" class="social-sharing-buttons-button share-linkedin" rel="noopener"> <svg aria-hidden="true" width="18px" height="18px" style="border-radius:3px;"> <use href="/modules/contrib/better_social_sharing_buttons/assets/dist/sprites/social-icons--no-color.svg#linkedin" /> </svg> </a> <a href="mailto:?subject=Cybersecurity%20Directives&body=https://www.cisa.gov/news-events/directives" title="Share to Email" aria-label="Share to Email" class="social-sharing-buttons-button share-email" target="_blank" rel="noopener"> <svg aria-hidden="true" width="18px" height="18px" style="border-radius:3px;"> <use href="/modules/contrib/better_social_sharing_buttons/assets/dist/sprites/social-icons--no-color.svg#email" /> </svg> </a> </div> </div> </div> </div> </div> </div> </div> <main id="main" class="c-main" role="main" tabindex="-1"> <div class="l-content"> <div class="l-sidebar has-aside-left"> <div class="l-sidebar__header"> <div class="c-hero c-hero--overlap"> <div class="c-hero__image"> <img loading="lazy" src="/sites/default/files/styles/hero_large/public/2023-02/hero_digitalblue_1.jpg?h=e0d9a4bb&itok=pY9jrrka" width="1800" height="600" alt="A blue background with cyber code" /> </div> <div class="c-hero__inner"> <div class="l-constrain c-hero__constrain"> <div class="c-hero__content"> <h1 class="c-hero__title">Cybersecurity Directives</h1> <div class="c-hero__subtitle"><p>The Cybersecurity and Infrastructure Security Agency (CISA) develops and oversees the implementation of “Binding Operational Directives (BODs)” and “Emergency Directives (EDs),” which require action on the part of <a href="/news-events/directives/federal-civilian-executive-branch-agencies-list" title="Federal Civilian Executive Branch Agencies List">certain federal agencies</a> in the civilian Executive Branch.</p></div> <div class="c-hero__decoration"></div> </div> </div> </div> </div> </div> <div class="l-sidebar__row"> <aside class="l-sidebar__left"> <div id="block-sidenavigation" class="c-block c-block--sidenav c-block--provider-menu-block c-block--id-menu-blockmain"> <h2 class="c-block__title"><a href="/news-events" class="menu-item--active-trail" data-drupal-link-system-path="node/7332">News & Events</a></h2> <div class="c-block__content"> <ul class="usa-nav__primary usa-accordion"> <li class="usa-nav__primary-item news"> <a href="/news-events/news" class="usa-nav__link" > <span>News</span> </a> </li> <li class="usa-nav__primary-item events"> <a href="/news-events/events" class="usa-nav__link" > <span>Events</span> </a> </li> <li class="usa-nav__primary-item cybersecurity-alerts--advisories"> <a href="/news-events/cybersecurity-advisories" class="usa-nav__link" > <span>Cybersecurity Alerts & Advisories</span> </a> </li> <li class="usa-nav__primary-item directives"> <a href="/news-events/directives" class="usa-nav__link usa-current" > <span>Directives</span> </a> </li> <li class="usa-nav__primary-item request-a-cisa-speaker"> <a href="/news-events/request-speaker" class="usa-nav__link" > <span>Request a CISA Speaker</span> </a> </li> <li class="usa-nav__primary-item congressional-testimony"> <a href="/news-events/congressional-testimony" class="usa-nav__link" > <span>Congressional Testimony</span> </a> </li> <li class="usa-nav__primary-item cisa-conferences"> <a href="/cisa-conferences" class="usa-nav__link" > <span>CISA Conferences</span> </a> </li> <li class="usa-nav__primary-item cisa-live"> <a href="/cisa-live" class="usa-nav__link" > <span>CISA Live!</span> </a> </li> </ul> </div> </div> </aside> <div class="l-sidebar__main"> <div class="c-paragraph c-paragraph--type-listing-blocks c-paragraph--view-mode-default l-page-section"> <div class="l-constrain"> <div class="l-page-section__content"> <div class="c-view c-view--listing-block-directives c-view--display-block_1 view js-view-dom-id-a51018f58e6799226161ece3d73e928c07fcc177c0869ff11477368ce1d1ab28"> <h3 >Emergency Directives</h3> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2024-04-02T12:00:00Z">Apr 02, 2024</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/ed-24-02-mitigating-significant-risk-nation-state-compromise-microsoft-corporate-email-system" target="_self"> <span>ED 24-02: Mitigating the Significant Risk from Nation-State Compromise of Microsoft Corporate Email System</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2024-02-09T12:00:00Z">Feb 09, 2024</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/supplemental-direction-v2-ed-24-01-mitigate-ivanti-connect-secure-and-ivanti-policy-secure" target="_self"> <span>Supplemental Direction V2: ED 24-01: Mitigate Ivanti Connect Secure and Ivanti Policy Secure Vulnerabilities</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2024-01-31T12:00:00Z">Jan 31, 2024</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/supplemental-direction-v1-ed-24-01-mitigate-ivanti-connect-secure-and-ivanti-policy-secure" target="_self"> <span>Supplemental Direction V1: ED 24-01: Mitigate Ivanti Connect Secure and Ivanti Policy Secure Vulnerabilities</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2024-01-19T12:00:00Z">Jan 19, 2024</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/ed-24-01-mitigate-ivanti-connect-secure-and-ivanti-policy-secure-vulnerabilities" target="_self"> <span>ED 24-01: Mitigate Ivanti Connect Secure and Ivanti Policy Secure Vulnerabilities</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2022-05-18T12:00:00Z">May 18, 2022</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/ed-22-03-mitigate-vmware-vulnerabilities" target="_self"> <span>ED 22-03: Mitigate VMware Vulnerabilities</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2022-04-08T12:00:00Z">Apr 08, 2022</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/ed-22-02-mitigate-apache-log4j-vulnerability-closed" target="_self"> <span>ED 22-02: Mitigate Apache Log4j Vulnerability (Closed)</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2021-07-13T12:00:00Z">Jul 13, 2021</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/ed-21-04-mitigate-windows-print-spooler-service-vulnerability" target="_self"> <span>ED 21-04: Mitigate Windows Print Spooler Service Vulnerability</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2021-04-20T12:00:00Z">Apr 20, 2021</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities" target="_self"> <span>ED 21-03: Mitigate Pulse Connect Secure Product Vulnerabilities</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2021-03-03T12:00:00Z">Mar 03, 2021</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities" target="_self"> <span>ED 21-02: Mitigate Microsoft Exchange On-Premises Product Vulnerabilities</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2020-12-13T12:00:00Z">Dec 13, 2020</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/ed-21-01-mitigate-solarwinds-orion-code-compromise" target="_self"> <span>ED 21-01: Mitigate SolarWinds Orion Code Compromise</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2020-09-18T12:00:00Z">Sep 18, 2020</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/ed-20-04-mitigate-netlogon-elevation-privilege-vulnerability-august-2020-patch-tuesday" target="_self"> <span>ED 20-04: Mitigate Netlogon Elevation of Privilege Vulnerability from August 2020 Patch Tuesday</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2020-07-16T12:00:00Z">Jul 16, 2020</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/ed-20-03-mitigate-windows-dns-server-remote-code-execution-vulnerability-july-2020-patch-tuesday" target="_self"> <span>ED 20-03: Mitigate Windows DNS Server Remote Code Execution Vulnerability from July 2020 Patch Tuesday</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2020-01-14T12:00:00Z">Jan 14, 2020</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/ed-20-02-mitigate-windows-vulnerabilities-january-2020-patch-tuesday" target="_self"> <span>ED 20-02: Mitigate Windows Vulnerabilities from January 2020 Patch Tuesday</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2019-01-22T12:00:00Z">Jan 22, 2019</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/ed-19-01-mitigate-dns-infrastructure-tampering" target="_self"> <span>ED 19-01: Mitigate DNS Infrastructure Tampering</span> </a> </h3> </div> </div> </article> </span></div></div> <h3 >Binding Operational Directives</h3> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2024-12-17T12:00:00Z">Dec 17, 2024</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/bod-25-01-implementation-guidance-implementing-secure-practices-cloud-services" target="_self"> <span>BOD 25-01: Implementation Guidance for Implementing Secure Practices for Cloud Services</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2024-12-17T12:00:00Z">Dec 17, 2024</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/bod-25-01-implementing-secure-practices-cloud-services" target="_self"> <span>BOD 25-01: Implementing Secure Practices for Cloud Services</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2023-06-13T12:00:00Z">Jun 13, 2023</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/bod-23-02-implementation-guidance-mitigating-risk-internet-exposed-management-interfaces" target="_self"> <span>BOD 23-02: Implementation Guidance for Mitigating the Risk from Internet-Exposed Management Interfaces</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2023-06-13T12:00:00Z">Jun 13, 2023</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/binding-operational-directive-23-02" target="_self"> <span>BOD 23-02: Mitigating the Risk from Internet-Exposed Management Interfaces</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2022-10-03T12:00:00Z">Oct 03, 2022</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/bod-23-01-implementation-guidance-improving-asset-visibility-and-vulnerability-detection-federal" target="_self"> <span>BOD 23-01: Implementation Guidance for Improving Asset Visibility and Vulnerability Detection on Federal Networks</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2022-10-03T12:00:00Z">Oct 03, 2022</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/bod-23-01-improving-asset-visibility-and-vulnerability-detection-federal-networks" target="_self"> <span>BOD 23-01: Improving Asset Visibility and Vulnerability Detection on Federal Networks</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2021-11-03T12:00:00Z">Nov 03, 2021</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/bod-22-01-reducing-significant-risk-known-exploited-vulnerabilities" target="_self"> <span>BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2020-09-02T12:00:00Z">Sep 02, 2020</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/bod-20-01-develop-and-publish-vulnerability-disclosure-policy" target="_self"> <span>BOD 20-01: Develop and Publish a Vulnerability Disclosure Policy</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2019-04-29T12:00:00Z">Apr 29, 2019</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/bod-19-02-vulnerability-remediation-requirements-internet-accessible-systems" target="_self"> <span>BOD 19-02: Vulnerability Remediation Requirements for Internet-Accessible Systems</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2018-05-07T12:00:00Z">May 07, 2018</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/bod-18-02-securing-high-value-assets" target="_self"> <span>BOD 18-02: Securing High Value Assets</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2017-10-16T12:00:00Z">Oct 16, 2017</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/bod-18-01-enhance-email-and-web-security" target="_self"> <span>BOD 18-01: Enhance Email and Web Security</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2017-09-13T12:00:00Z">Sep 13, 2017</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/bod-17-01-removal-kaspersky-branded-products" target="_self"> <span>BOD 17-01: Removal of Kaspersky-branded Products</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2016-10-17T12:00:00Z">Oct 17, 2016</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/bod-16-03-2016-agency-cybersecurity-reporting-requirements" target="_self"> <span>BOD 16-03: 2016 Agency Cybersecurity Reporting Requirements</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2016-09-27T12:00:00Z">Sep 27, 2016</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/bod-16-02-threat-network-infrastructure-devices" target="_self"> <span>BOD 16-02: Threat to Network Infrastructure Devices</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2016-06-09T12:00:00Z">Jun 09, 2016</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/binding-operational-directive-16-01" target="_self"> <span>BOD 16-01: Securing High Value Assets (Revoked)</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2015-05-21T12:00:00Z">May 21, 2015</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/binding-operational-directive-15-01" target="_self"> <span>BOD 15-01: Critical Vulnerability Mitigation Requirement for Federal Civilian Executive Branch Departments and Agencies’ Internet-Accessible Systems (Revoked)</span> </a> </h3> </div> </div> </article> </span></div></div> <div class="c-view__row"><div class="views-field views-field-rendered-entity"><span class="field-content"> <article class="c-teaser c-teaser--horizontal" role="article"> <div class="c-teaser__row"> <div class="c-teaser__content"> <div class="c-teaser__eyebrow"> <div class="c-teaser__date"><time datetime="2003-12-17T12:00:00Z">Dec 17, 2003</time> </div> </div> <h3 class="c-teaser__title"> <a href="/news-events/directives/homeland-security-presidential-directive-7" target="_self"> <span>Homeland Security Presidential Directive 7</span> </a> </h3> </div> </div> </article> </span></div></div> </div> </div> </div> </div> <div class="c-wysiwyg"> <div class="l-constrain"> <div class="c-wysiwyg__inner"> <div class="c-field c-field--name-field-full-html c-field--type-text-long c-field--label-hidden"> <div class="c-field__content"><h2>Federal Civilian Executive Branch Agencies List</h2><p>Federal agencies are <a href="https://uscode.house.gov/view.xhtml?req=(title:44%20section:3554%20edition:prelim)%20OR%20(granuleid:USC-prelim-title44-section3554)&f=treesort&edition=prelim&num=0&jumpTo=true" title="Federal agency responsibilities">required</a> to comply with DHS-developed directives.</p><p>These directives <a href="https://uscode.house.gov/view.xhtml?req=(title:44%20section:3553%20edition:prelim)%20OR%20(granuleid:USC-prelim-title44-section3553)&f=treesort&edition=prelim&num=0&jumpTo=true" title="Authority and functions of the Director and the Secretary">do not apply</a> to statutorily defined “national security systems” nor to certain systems operated by the Department of Defense or the Intelligence Community.</p><p><a class="c-button" href="/federal-civilian-executive-branch-agencies-list" title="Federal Civilian Executive Branch Agencies List">View all agencies</a></p></div></div> </div> </div> </div> </div> </div> </div> </div> </main> <footer class="usa-footer usa-footer--slim" role="contentinfo"> <div class="usa-footer__return-to-top"> <div class="l-constrain"> <a href="#top">Return to top</a> </div> </div> <div class="usa-footer__upper"> <div class="l-constrain"> <ul class="c-menu c-menu--footer-main"> <li class="c-menu__item"> <a href="/topics" class="c-menu__link js-top-level" aria-current="false" data-drupal-link-system-path="node/7329">Topics</a> </li> <li class="c-menu__item"> <a href="/spotlight" class="c-menu__link js-top-level" aria-current="false" data-drupal-link-system-path="node/7330">Spotlight</a> </li> <li class="c-menu__item"> <a href="/resources-tools" class="c-menu__link js-top-level" aria-current="false" data-drupal-link-system-path="node/7331">Resources & Tools</a> </li> <li class="c-menu__item is-active-trail"> <a href="/news-events" class="c-menu__link js-top-level is-active-trail" aria-current="false" data-drupal-link-system-path="node/7332">News & Events</a> </li> <li class="c-menu__item"> <a href="/careers" class="c-menu__link js-top-level" aria-current="false" data-drupal-link-system-path="node/7323">Careers</a> </li> <li class="c-menu__item"> <a href="/about" class="c-menu__link js-top-level" aria-current="false" data-drupal-link-system-path="node/6944">About</a> </li> </ul> </div> </div> <div class="usa-footer__main"> <div class="l-constrain"> <div class="usa-footer__main-row"> <div class="usa-footer__brand"> <a class="c-site-name c-site-name--footer" href="/" rel="home" title="Go to the Cybersecurity & Infrastructure Security Agency homepage"> <span class="c-site-name__text">Cybersecurity & Infrastructure Security Agency</span> </a> </div> <div class="usa-footer__contact"> <ul class="c-menu c-menu--social"> <li class="c-menu__item"> <a href="https://www.facebook.com/CISA" class="c-menu__link--facebook c-menu__link js-top-level" aria-current="false">Facebook</a> </li> <li class="c-menu__item"> <a href="https://twitter.com/CISAgov" class="c-menu__link--twitter c-menu__link js-top-level" aria-current="false">Twitter</a> </li> <li class="c-menu__item"> <a href="https://www.linkedin.com/company/cybersecurity-and-infrastructure-security-agency" class="c-menu__link--linkedin c-menu__link js-top-level" aria-current="false">LinkedIn</a> </li> <li class="c-menu__item"> <a href="https://www.youtube.com/@cisagov" class="c-menu__link--youtube c-menu__link js-top-level" aria-current="false">YouTube</a> </li> <li class="c-menu__item"> <a href="https://www.instagram.com/cisagov" class="c-menu__link--instagram c-menu__link js-top-level" aria-current="false">Instagram</a> </li> <li class="c-menu__item"> <a href="/subscribe-updates-cisa" class="c-menu__link--rss c-menu__link js-top-level" aria-current="false">RSS</a> </li> </ul> <div class="usa-footer__contact-info"> <span>CISA Central</span> <a href="tel:1-844-Say-CISA">1-844-Say-CISA</a> <a href="mailto:SayCISA@cisa.dhs.gov">SayCISA@cisa.dhs.gov</a> </div> </div> </div> </div> </div> <div class="usa-footer__lower"> <div class="l-constrain"> <div class="usa-footer__lower-row"> <div class="usa-footer__lower-left"> <div class="c-dhs-logo"> <div class="c-dhs-logo__seal">DHS Seal</div> <div class="c-dhs-logo__content"> <div class="c-dhs-logo__url">CISA.gov</div> <div class="c-dhs-logo__text">An official website of the U.S. Department of Homeland Security</div> </div> </div> <ul class="c-menu c-menu--footer"> <li class="c-menu__item"> <a href="/about" class="c-menu__link js-top-level" title="About CISA" aria-current="false" data-drupal-link-system-path="node/6944">About CISA</a> </li> <li class="c-menu__item"> <a href="https://www.dhs.gov/performance-financial-reports" class="c-menu__link js-top-level" title="Budget and Performance" aria-current="false">Budget and Performance</a> </li> <li class="c-menu__item"> <a href="https://www.dhs.gov" title="Department of Homeland Security" class="c-menu__link js-top-level" aria-current="false">DHS.gov</a> </li> <li class="c-menu__item"> <a href="https://www.dhs.gov/foia" class="c-menu__link js-top-level" title="FOIA Requests" aria-current="false">FOIA Requests</a> </li> <li class="c-menu__item"> <a href="/no-fear-act" title="No FEAR Act Reporting" class="c-menu__link js-top-level" aria-current="false" data-drupal-link-system-path="node/21494">No FEAR Act</a> </li> <li class="c-menu__item"> <a href="https://www.oig.dhs.gov/" class="c-menu__link js-top-level" title="Office of Inspector General" aria-current="false">Office of Inspector General</a> </li> <li class="c-menu__item"> <a href="/privacy-policy" class="c-menu__link js-top-level" title="Privacy Policy" aria-current="false" data-drupal-link-system-path="node/16115">Privacy Policy</a> </li> <li class="c-menu__item"> <a href="https://public.govdelivery.com/accounts/USDHSCISA/subscriber/new?topic_id=USDHSCISA_138" title="Subscribe to Email Updates" class="c-menu__link js-top-level" aria-current="false">Subscribe</a> </li> <li class="c-menu__item"> <a href="https://www.whitehouse.gov/" class="c-menu__link js-top-level" title="The White House" aria-current="false">The White House</a> </li> <li class="c-menu__item"> <a href="https://www.usa.gov/" class="c-menu__link js-top-level" title="USA.gov" aria-current="false">USA.gov</a> </li> <li class="c-menu__item"> <a href="/forms/feedback" title="Website Feedback" class="c-menu__link js-top-level" aria-current="false" data-drupal-link-system-path="forms/feedback">Website Feedback</a> </li> </ul> </div> <div class="usa-footer__lower-right"> <iframe src="https://www.dhs.gov/ntas/" name="National Terrorism Advisory System" title="National Terrorism Advisory System" width="170" height="180" scrolling="no" frameborder="0" seamless border="0" ></iframe> </div> </div> </div> </div> </footer> </div> </div> <script src="/core/assets/vendor/jquery/jquery.min.js?v=3.7.1"></script> <script src="/core/assets/vendor/once/once.min.js?v=1.0.1"></script> <script src="/core/misc/drupal.js?v=10.4.1"></script> <script src="/core/misc/drupal.init.js?v=10.4.1"></script> <script src="/core/assets/vendor/tabbable/index.umd.min.js?v=6.2.0"></script> <script src="/modules/contrib/ckeditor_accordion/js/accordion.frontend.min.js?srooad"></script> <script src="/modules/contrib/extlink/js/extlink.js?v=10.4.1"></script> <script src="/core/misc/jquery.form.js?v=4.3.0"></script> <script src="/core/misc/progress.js?v=10.4.1"></script> <script src="/core/assets/vendor/loadjs/loadjs.min.js?v=4.3.0"></script> <script src="/core/misc/debounce.js?v=10.4.1"></script> <script src="/core/misc/announce.js?v=10.4.1"></script> <script src="/core/misc/message.js?v=10.4.1"></script> <script src="/core/misc/ajax.js?v=10.4.1"></script> <script src="/modules/contrib/google_tag/js/gtag.ajax.js?srooad"></script> <script src="/profiles/cisad8_gov/themes/custom/gesso/dist/js/breadcrumb.es6.js?srooad"></script> <script src="/profiles/cisad8_gov/themes/custom/gesso/dist/js/common.js?srooad"></script> <script src="/profiles/cisad8_gov/themes/custom/gesso/dist/js/uswds-init.es6.js?srooad"></script> <script src="/profiles/cisad8_gov/themes/custom/gesso/dist/js/uswds.es6.js?srooad"></script> <script src="/profiles/cisad8_gov/themes/custom/gesso/dist/js/menu-sidebar.es6.js?srooad"></script> <script src="/profiles/cisad8_gov/themes/custom/gesso/dist/js/teaser.es6.js?srooad"></script> </body> </html>