Decree
Executive Order 14306 on cybersecurity (2025)
Official title: Executive Order 14306 – Sustaining Select Efforts To Strengthen the Nation's Cybersecurity and Amending Executive Order 13694 and Executive Order 14144
In force since 6 June 2025Record checked against the official source on 29 October 2026 · Methodology
EO 14306 · Executive Order 14306 · EO 14306, 90 FR 24723 · EO14306,90FR24723
CSIRT · CERT · IoT · Internet of Things · Internet delle cose · objets connectés · Internet de las cosas · Internet der Dinge · artificial intelligence · intelligenza artificiale · intelligence artificielle · inteligencia artificial · künstliche Intelligenz
Official source: https://www.whitehouse.gov/presidential-actions/2025/06/sustaining-select-efforts-to-strengthen-the-nations-cybersecurity-and-amending-executive-order-13694-and-executive-order-14144/
- Official number
- EO 14306, 90 FR 24723
- Date adopted
- Entry into force
Summary
The order rewrites much of Executive Order 14144 of January 2025, removing among other things the attestation requirements for software suppliers, the digital identity provisions and several agency deadlines. It keeps and resets some actions: updating NIST's Secure Software Development Framework and the SP 800-53 guidance on updates, preparing for post-quantum cryptography with a move to TLS 1.3 by 2030, using artificial intelligence for cyber defence and the U.S. Cyber Trust Mark in purchases of IoT products. It also limits the sanctions under Executive Order 13694 to foreign actors responsible for malicious cyber activity.
Who it applies to
Federal agencies (largely excluding national security systems) and, indirectly, the software, service and IoT product suppliers of the federal government.
Key dates
- Deadline for the preliminary update of NIST's Secure Software Development Framework (SSDF) and for CISA's list of product categories supporting post-quantum cryptography
- Date set by the order from which agencies must require the U.S. Cyber Trust Mark on the consumer IoT products they buy (through an amendment to the Federal Acquisition Regulation)
- Deadline for OMB guidance (including the revision of Circular A-130) on critical risks and modern architectures for federal systems
- Federal agencies must support Transport Layer Security 1.3 or a later version
Information
Record details
How to cite
APA
President of the United States. (2025). Executive Order 14306 – Sustaining Select Efforts To Strengthen the Nation's Cybersecurity and Amending Executive Order 13694 and Executive Order 14144 (EO 14306, 90 FR 24723). https://www.whitehouse.gov/presidential-actions/2025/06/sustaining-select-efforts-to-strengthen-the-nations-cybersecurity-and-amending-executive-order-13694-and-executive-order-14144/
Chicago
President of the United States. "Executive Order 14306 – Sustaining Select Efforts To Strengthen the Nation's Cybersecurity and Amending Executive Order 13694 and Executive Order 14144." 6 June 2025. https://www.whitehouse.gov/presidential-actions/2025/06/sustaining-select-efforts-to-strengthen-the-nations-cybersecurity-and-amending-executive-order-13694-and-executive-order-14144/.
BibTeX
@misc{us_eo_14306_cybersecurity_2025,
author = {{President of the United States}},
title = {{Executive Order 14306 – Sustaining Select Efforts To Strengthen the Nation's Cybersecurity and Amending Executive Order 13694 and Executive Order 14144}},
year = {2025},
note = {EO 14306, 90 FR 24723},
url = {https://www.whitehouse.gov/presidential-actions/2025/06/sustaining-select-efforts-to-strengthen-the-nations-cybersecurity-and-amending-executive-order-13694-and-executive-order-14144/},
urldate = {2026-10-29}
}Metadata and summary: CC BY 4.0 · JSON