BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Varry LLC//FedXchange deliverables//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
X-WR-CALNAME:Federal deliverables (FedXchange)
X-WR-CALDESC:Due dates from the FedXchange deliverables tracker: https://fe
 dxchange.com/governance/deliverables?kind=action
X-PUBLISHED-TTL:P1D
REFRESH-INTERVAL;VALUE=DURATION:P1D
BEGIN:VEVENT
UID:action-31@fedxchange.com
DTSTAMP:20261013T004957Z
DTSTART;VALUE=DATE:20261022
DTEND;VALUE=DATE:20261023
SUMMARY:Due: M-26-15: Submit a post-quantum cryptography migration plan to 
 OMB and the Office of the National Cyber Director.
DESCRIPTION:Submit a post-quantum cryptography migration plan to OMB and th
 e Office of the National Cyber Director.\nDue: By October 22\, 2026 (withi
 n 120 days of the memo).\nFedXchange worked out this date from the documen
 t's issue date. Check the source.\nApplies to executive branch agencies.\n
 Source: https://www.whitehouse.gov/wp-content/uploads/2026/06/M-26-15-Exec
 ution-of-the-Migration-to-Post-Quantum-Cryptography.pdf\nTracker: https://
 fedxchange.com/governance/omb-m-26-15
URL:https://fedxchange.com/governance/omb-m-26-15
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:action-33@fedxchange.com
DTSTAMP:20261013T004957Z
DTSTART;VALUE=DATE:20261030
DTEND;VALUE=DATE:20261031
SUMMARY:Due: M-26-18: Inventory the agency's public websites that need sign
 -in.
DESCRIPTION:Inventory the agency's public websites that need sign-in.\nDue:
  By October 30\, 2026 (within 60 days of the memo).\nFedXchange worked out
  this date from the document's issue date. Check the source.\nApplies to e
 xecutive branch agencies\, but only agencies with public websites that nee
 d sign-in.\nSource: https://www.whitehouse.gov/wp-content/uploads/2026/08/
 M-26-18-Scaling-Use-of-Login.gov-to-Deliver-a-Universal-Sign-on-for-Public
 -Services.pdf\nTracker: https://fedxchange.com/governance/omb-m-26-18
URL:https://fedxchange.com/governance/omb-m-26-18
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:action-13@fedxchange.com
DTSTAMP:20261013T004957Z
DTSTART;VALUE=DATE:20271231
DTEND;VALUE=DATE:20280101
SUMMARY:Due: BOD 26-02: Remove and replace unsupported edge devices.
DESCRIPTION:Remove and replace unsupported edge devices.\nDue: By 2027.\nAp
 plies to federal civilian executive branch (FCEB).\nSource: https://www.ci
 sa.gov/news-events/directives/bod-26-02-mitigating-risk-end-support-edge-d
 evices\nTracker: https://fedxchange.com/governance/cisa-bod-26-02
URL:https://fedxchange.com/governance/cisa-bod-26-02
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:action-26@fedxchange.com
DTSTAMP:20261013T004957Z
DTSTART;VALUE=DATE:20260520
DTEND;VALUE=DATE:20260521
SUMMARY:Due: M-26-02: Build information security risk steps into buying and
  using drones\, including MFA-based access controls\, trusted software upd
 ates\, and data encryption.
DESCRIPTION:Build information security risk steps into buying and using dro
 nes\, including MFA-based access controls\, trusted software updates\, and
  data encryption.\nDue: By May 20\, 2026 (within 180 days of the memo).\nF
 edXchange worked out this date from the document's issue date. Check the s
 ource.\nApplies to executive branch agencies\, but only agencies that buy 
 or use drones.\nSource: https://www.whitehouse.gov/wp-content/uploads/2025
 /11/M-26-02-Ensuring-Government-Use-of-Secure-Unmanned-Aircraft-Systems-an
 d-Supporting-United-States-Producers.pdf\nTracker: https://fedxchange.com/
 governance/omb-m-26-02
URL:https://fedxchange.com/governance/omb-m-26-02
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:action-36@fedxchange.com
DTSTAMP:20261013T004957Z
DTSTART;VALUE=DATE:20260403
DTEND;VALUE=DATE:20260404
SUMMARY:Due: M-25-21: Apply the memo's minimum risk management practices to
  high-impact AI.
DESCRIPTION:Apply the memo's minimum risk management practices to high-impa
 ct AI.\nDue: By April 3\, 2026 (within 365 days of the memo).\nFedXchange 
 worked out this date from the document's issue date. Check the source.\nAp
 plies to executive branch agencies.\nSource: https://www.whitehouse.gov/wp
 -content/uploads/2025/02/M-25-21-Accelerating-Federal-Use-of-AI-through-In
 novation-Governance-and-Public-Trust.pdf\nTracker: https://fedxchange.com/
 governance/omb-m-25-21
URL:https://fedxchange.com/governance/omb-m-25-21
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:action-10@fedxchange.com
DTSTAMP:20261013T004957Z
DTSTART;VALUE=DATE:20250620
DTEND;VALUE=DATE:20250621
SUMMARY:Due: BOD 25-01: Apply CISA's mandatory secure configuration setting
 s.
DESCRIPTION:Apply CISA's mandatory secure configuration settings.\nDue: By 
 June 20\, 2025.\nApplies to federal civilian executive branch (FCEB)\, but
  only agencies with Microsoft 365 cloud tenants.\nSource: https://www.cisa
 .gov/news-events/directives/bod-25-01-implementing-secure-practices-cloud-
 services\nTracker: https://fedxchange.com/governance/cisa-bod-25-01
URL:https://fedxchange.com/governance/cisa-bod-25-01
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:action-9@fedxchange.com
DTSTAMP:20261013T004957Z
DTSTART;VALUE=DATE:20250425
DTEND;VALUE=DATE:20250426
SUMMARY:Due: BOD 25-01: Run CISA's configuration assessment tools on each t
 enant.
DESCRIPTION:Run CISA's configuration assessment tools on each tenant.\nDue:
  By April 25\, 2025.\nApplies to federal civilian executive branch (FCEB)\
 , but only agencies with Microsoft 365 cloud tenants.\nSource: https://www
 .cisa.gov/news-events/directives/bod-25-01-implementing-secure-practices-c
 loud-services\nTracker: https://fedxchange.com/governance/cisa-bod-25-01
URL:https://fedxchange.com/governance/cisa-bod-25-01
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:action-8@fedxchange.com
DTSTAMP:20261013T004957Z
DTSTART;VALUE=DATE:20250221
DTEND;VALUE=DATE:20250222
SUMMARY:Due: BOD 25-01: List the agency's Microsoft 365 cloud tenants for C
 ISA.
DESCRIPTION:List the agency's Microsoft 365 cloud tenants for CISA.\nDue: B
 y February 21\, 2025.\nApplies to federal civilian executive branch (FCEB)
 \, but only agencies with Microsoft 365 cloud tenants.\nSource: https://ww
 w.cisa.gov/news-events/directives/bod-25-01-implementing-secure-practices-
 cloud-services\nTracker: https://fedxchange.com/governance/cisa-bod-25-01
URL:https://fedxchange.com/governance/cisa-bod-25-01
TRANSP:TRANSPARENT
END:VEVENT
BEGIN:VEVENT
UID:action-23@fedxchange.com
DTSTAMP:20261013T004957Z
DTSTART;VALUE=DATE:20240930
DTEND;VALUE=DATE:20241001
SUMMARY:Due: M-22-09: Meet the memo's zero trust goals\, including phishing
 -resistant MFA\, complete device inventories\, encrypted DNS and web traff
 ic\, application security testing\, and data categorization.
DESCRIPTION:Meet the memo's zero trust goals\, including phishing-resistant
  MFA\, complete device inventories\, encrypted DNS and web traffic\, appli
 cation security testing\, and data categorization.\nDue: By September 30\,
  2024.\nApplies to executive branch agencies.\nSource: https://bidenwhiteh
 ouse.archives.gov/wp-content/uploads/2022/01/M-22-09.pdf\nTracker: https:/
 /fedxchange.com/governance/omb-m-22-09
URL:https://fedxchange.com/governance/omb-m-22-09
TRANSP:TRANSPARENT
END:VEVENT
END:VCALENDAR