News & Events

This V1 supersedes the required actions in Emergency Directive (ED) 26-03: Mitigate Vulnerabilities in Cisco SD-WAN Systems and applies to any federal agency running affected products. This V1 includes updated and new required actions and an additional reporting requirement.

This V1 supersedes the required actions in Emergency Directive (ED) 25-03: Identify and Mitigate Potential Compromise of Cisco Devices and applies to any agency running affected products. V1 expands on the original ED 25-03 requirements with required actions three, four, and six.

This Directive supersedes and hereby revokes BOD 19-02 and BOD 22-01. BOD 26-04: Prioritizing Security Updates Based on Risk, consolidates and clarifies vulnerability remediation guidelines for federal agencies addressing cybersecurity vulnerabilities.

This Binding Operational Directive, developed in coordination with OMB, implements OMB policy on phasing out unsupported information systems and information system components.