BOD 26-02, Mitigating Risk From End-of-Support Edge Devices
In effectCISA · Binding Operational Directive · February 5, 2026
Summary
Requires agencies to update edge devices such as firewalls and routers, report devices on CISA's end-of-support list, remove and replace unsupported edge devices by 2027, and keep an ongoing inventory of devices nearing end of support.
What FedXchange has recorded
No changes recorded. The watch records a new document and any change in its status.
- Issuer
- Cybersecurity and Infrastructure Security Agency (CISA)
- Type
- Binding Operational Directive
- Number
- BOD 26-02
- Issued
- February 5, 2026
- Status
- In effect
Still in force, possibly with amendments.
Get new governance by email
A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.