Software and application security

• 2026 Minimum Elements for a Software Bill of Materials (SBOM)

  United StatesGuideline / framework / standard29 July 2026

• BOD 26-04: Prioritizing Security Updates Based on Risk

  United StatesDirectiveBOD 26-0410 June 2026

• ED 26-03: Mitigate Vulnerabilities in Cisco SD-WAN Systems

  United StatesDirectiveED 26-0325 February 2026

• BOD 26-02: Mitigating Risk From End-of-Support Edge Devices

  United StatesDirectiveBOD 26-025 February 2026

• ED 25-02: Mitigate Microsoft Exchange Vulnerability

  United StatesDirectiveED 25-027 August 2025

• Secure Software Development Attestation Form

  United StatesGuideline / framework / standardOMB Control No. 1670-005211 March 2024

• Secure by Design: Shifting the Balance of Cybersecurity Risk: Principles and Approaches for Secure by Design Software

  United StatesGuideline / framework / standard16 October 2023

• BOD 23-02: Mitigating the Risk from Internet-Exposed Management Interfaces

  United StatesDirectiveBOD 23-0213 June 2023

• Engineering Trustworthy Secure Systems (NIST SP 800-160 Vol. 1 Rev. 1)

  United StatesGuideline / framework / standardNIST SP 800-160 Vol. 1 Rev. 116 November 2022

• Binding Operational Directive 23-01: Improving Asset Visibility and Vulnerability Detection on Federal Networks

  United StatesDirectiveBOD 23-013 October 2022

• ED 22-02: Mitigate Apache Log4j Vulnerability

  United StatesDirectiveED 22-0217 December 2021Superseded

• Binding Operational Directive 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities

  United StatesDirectiveBOD 22-013 November 2021Repealed

• ED 21-04: Mitigate Windows Print Spooler Service Vulnerability

  United StatesDirectiveED 21-0413 July 2021Superseded

• ED 20-04: Mitigate Netlogon Elevation of Privilege Vulnerability from August 2020 Patch Tuesday

  United StatesDirectiveED 20-0418 September 2020Superseded

• BOD 20-01: Develop and Publish a Vulnerability Disclosure Policy

  United StatesDirectiveBOD 20-012 September 2020

• ED 20-03: Mitigate Windows DNS Server Remote Code Execution Vulnerability from July 2020 Patch Tuesday

  United StatesDirectiveED 20-0316 July 2020Superseded

• ED 20-02: Mitigate Windows Vulnerabilities from January 2020 Patch Tuesday

  United StatesDirectiveED 20-0214 January 2020Superseded

• BOD 19-02: Vulnerability Remediation Requirements for Internet-Accessible Systems

  United StatesDirectiveBOD 19-0229 April 2019Repealed

• Binding Operational Directive 16-02: Threat to Network Infrastructure Devices

  United StatesDirectiveBOD 16-0227 September 2016

The page address contains your search: copy it to share.