M-21-31, Improving the Federal Government's Investigative and Remediation Capabilities Related to Cybersecurity Incidents

Summary

Sets a four-tier maturity model for event logging, requires agencies to keep specified logs for set periods, and makes agencies share log data with CISA and federal law enforcement to support incident investigations.

Read it on bidenwhitehouse.archives.gov

Topics

• Logging and monitoring
• Incident response

Replaced by

• M-26-14, Ensuring Effective and Efficient Agency Logging and Network Visibility to Defend Against Evolving Cyber Threats (in effect)

What FedXchange has recorded

No changes recorded. The watch records a new document and any change in its status.