M-17-25, Reporting Guidance for Executive Order on Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure

Summary

Tells agencies how to deliver the risk management reports required by Executive Order 13800 within 90 days, using the NIST Cybersecurity Framework to document risks, decisions, and plans.

Read it on bidenwhitehouse.archives.gov

Topics

• Risk management and controls
• Security programs and FISMA reporting

Replaced by

• M-22-05, Fiscal Year 2021-2022 Guidance on Federal Information Security and Privacy Management Requirements (rescinded)

What FedXchange has recorded

No changes recorded. The watch records a new document and any change in its status.