Skip to content
FedXchange
Menu

Deliverables and due dates

What federal cybersecurity, privacy, and technology governance asks agencies to deliver, and by when: every required action in a law, memo, directive, or standard still in effect, and every open comment period. Soonest first.

Choose your agencies to see only what applies to them. Add the dates to your calendar, or download the list as a spreadsheet.

Add the dated ones to a calendarDownload as a spreadsheet (CSV)The governance tracker

Choose your agencies

Choose one or more agencies to see only the deliverables that apply to them. An agency outside the list can choose the "Not on the list" entry that fits it. Bookmark the page to keep your choice.

CFO Act agencies
Other agencies
Not on the list

Due in the next 30 days (7)

Required actions come from the governance tracker, where FedXchange's editors record what each document asks of agencies. "Applies if" means the action reaches the agency only when a condition holds, such as running the product a directive names. A date marked "Worked out" is counted from the document's issue date, such as 120 days after a memo.

Check the official source before you rely on a date. Each item links to its page in the tracker, which links to the source.