BOD 23-02, Mitigating the Risk from Internet-Exposed Management Interfaces
In effectCISA · Binding Operational Directive · June 13, 2023
Summary
Requires agencies, within 14 days of finding one or being told by CISA, to take device management interfaces off the public internet or protect them with zero trust access controls.
What FedXchange has recorded
No changes recorded. The watch records a new document and any change in its status.
- Issuer
- Cybersecurity and Infrastructure Security Agency (CISA)
- Type
- Binding Operational Directive
- Number
- BOD 23-02
- Issued
- June 13, 2023
- Status
- In effect
Still in force, possibly with amendments.
Get new governance by email
A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.