🛡️ Security

BOD 22-01

CISA Binding Operational Directive 22-01, which requires U.S. Federal Civilian Executive Branch agencies to remediate vulnerabilities listed in the Known Exploited Vulnerabilities catalog by a set deadline. CISA shortens the deadline when exploitation is widespread.

📚 Deep Dive

Learn Article

How to Triage a CISA KEV Addition in 72 Hours

A repeatable process for the three days after CISA adds a CVE to the KEV catalog: scope, prioritize, patch or mitigate, hunt, and document, in that order.

intermediate 5 min read

Back to Glossary