Skip to content
FedXchange
Menu

Governance tracker

Federal cybersecurity, privacy, and technology governance

Every federal cybersecurity, privacy, and information technology (IT) governance document from the Privacy Act of 1974 to today: laws, executive orders, memoranda, directives, standards, and contract rules.

FedXchange's watch checks the Cybersecurity and Infrastructure Security Agency (CISA), the Office of Management and Budget (OMB), the National Archives (NARA), and the Federal Register every day, and the National Institute of Standards and Technology (NIST) every week. New finds appear here the day they are found. The tracker lists public documents only.

Get new governance by emailWhat the statuses meanNames on this page

Found in the last 7 days

Nothing new in the last 7 days.

Skip to the results

Filters

Results

631 documents

Showing 451 to 500.

Governance documents, sorted by date issued, newest first. Page 10 of 13.

The table scrolls sideways. Each title opens the document's page.

Governance documents, sorted by date issued, newest first. Page 10 of 13.
Number, sort A to ZTitle, sort A to ZIssuer, sort A to ZTypeIssued, sort oldest firstStatus, sort A to Z
NoneBuilding a 21st Century Digital GovernmentWhite HousePresidential directiveMay 23, 2012In effect
M-12-10Implementing PortfolioStatOMBOMB memorandumMarch 30, 2012In effect
FIPS 180-4Secure Hash Standard (SHS)NISTFIPS standardMarch 6, 2012In effect
ISOO Notice 2012-02Classification Marking Instructions on the Use of "50X1-HUM" vs "25X1-human" as a Declassification InstructionNARAISOO noticeDecember 23, 2011In effect
SP 800-63-1Electronic Authentication GuidelineNISTNIST Special PublicationDecember 12, 2011Withdrawn
NoneSecurity Authorization of Information Systems in Cloud Computing EnvironmentsOMBOMB memorandumDecember 8, 2011Rescinded
ISOO Notice 2012-01Requirements for Derivative Classifier TrainingNARAISOO noticeDecember 8, 2011In effect
NoneManaging Government RecordsWhite HousePresidential directiveNovember 28, 2011In effect
CUI Joint Memo 2011-11-22CUI and the Freedom of Information ActNARACUI noticeNovember 22, 2011Superseded
EO 13587Structural Reforms To Improve the Security of Classified Networks and the Responsible Sharing and Safeguarding of Classified InformationWhite HouseExecutive orderOctober 7, 2011In effect
NoneRequirements for Accepting Externally-Issued Identity CredentialsOMBOMB memorandumOctober 6, 2011Rescinded
SP 800-137Information Security Continuous Monitoring (ISCM) for Federal Information Systems and OrganizationsNISTNIST Special PublicationSeptember 30, 2011In effect
SP 800-145The NIST Definition of Cloud ComputingNISTNIST Special PublicationSeptember 28, 2011In effect
M-11-33FY 2011 Reporting Instructions for the Federal Information Security Management Act and Agency Privacy ManagementOMBOMB memorandumSeptember 14, 2011Superseded
SP 800-128Guide for Security-Focused Configuration Management of Information SystemsNISTNIST Special PublicationAugust 12, 2011In effect
M-11-29Chief Information Officer AuthoritiesOMBOMB memorandumAugust 8, 2011Rescinded
M-11-27Implementing the Telework Enhancement Act of 2010: Security GuidelinesOMBOMB memorandumJuly 15, 2011In effect
DFARS Case 2011-D039Defense Federal Acquisition Regulation Supplement; Safeguarding Unclassified DoD Information (DFARS Case 2011-D039)DoDProposed ruleJune 29, 2011Superseded
CUI Office Notice 2011-01Initial Implementation Guidance for Executive Order 13556NARACUI noticeJune 9, 2011Superseded
ISOO Notice 2011-02Further Guidance and Clarification on Commingling Atomic Energy Information and Classified National Security InformationNARAISOO noticeMay 18, 2011In effect
ISOO Notice 2011-01Review and Approval of Exemptions to Automatic Declassification Pursuant to Sections 3.3(b) and 3.3(h) of Executive Order 13526NARAISOO noticeApril 28, 2011Rescinded
SP 800-39Managing Information Security Risk: Organization, Mission, and Information System ViewNISTNIST Special PublicationMarch 2011In effect
M-11-11Continued Implementation of Homeland Security Presidential Directive (HSPD) 12– Policy for a Common Identification Standard for Federal Employees and ContractorsOMBOMB memorandumFebruary 3, 2011Rescinded
SP 800-131ATransitions: Recommendation for Transitioning the Use of Cryptographic Algorithms and Key LengthsNISTNIST Special PublicationJanuary 13, 2011Withdrawn
M-11-08Initial Assessments of Safeguarding and Counterintelligence Postures for Classified National Security Information in Automated SystemsOMBOMB memorandumJanuary 3, 2011In effect
EO 13556Controlled Unclassified InformationWhite HouseExecutive orderNovember 4, 2010In effect
M-11-02Sharing Data While Protecting PrivacyOMBOMB memorandumNovember 3, 2010In effect
ISOO Notice 2010-02Agencies Eligible/Ineligible to Receive ReferralsNARAISOO noticeSeptember 30, 2010Rescinded
NoneTransition to IPv6OMBOMB memorandumSeptember 28, 2010Rescinded
EO 13549Classified National Security Information Program for State, Local, Tribal, and Private Sector EntitiesWhite HouseExecutive orderAugust 18, 2010In effect
M-10-28Clarifying Cybersecurity Responsibilities and Activities of the Executive Office of the President and the Department of Homeland Security (DHS)OMBOMB memorandumJuly 6, 2010Rescinded
SP 800-53A Rev. 1Guide for Assessing the Security Controls in Federal Information Systems and Organizations: Building Effective Security Assessment PlansNISTNIST Special PublicationJune 29, 2010Withdrawn
M-10-25Reforming the Federal Government's Efforts to Manage Information Technology ProjectsOMBOMB memorandumJune 28, 2010Rescinded
M-10-22Guidance for Online Use of Web Measurement and Customization TechnologiesOMBOMB memorandumJune 25, 2010In effect
M-10-23Guidance for Agency Use of Third-Party Websites and ApplicationsOMBOMB memorandumJune 25, 2010In effect
SP 800-34 Rev. 1Contingency Planning Guide for Federal Information SystemsNISTNIST Special PublicationMay 31, 2010In effect
M-10-15FY 2010 Reporting Instructions for the Federal Information Security Management Act and Agency Privacy ManagementOMBOMB memorandumApril 21, 2010Rescinded
SP 800-122Guide to Protecting the Confidentiality of Personally Identifiable Information (PII)NISTNIST Special PublicationApril 6, 2010In effect
NoneFederal Data Center Consolidation InitiativeOMBOMB memorandumFebruary 26, 2010Superseded
SP 800-37 Rev. 1Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle ApproachNISTNIST Special PublicationFebruary 22, 2010Withdrawn
EO 13526Classified National Security InformationWhite HouseExecutive orderDecember 29, 2009In effect
M-10-06Open Government DirectiveOMBOMB memorandumDecember 8, 2009In effect
M-09-32Update on the Trusted Internet Connections InitiativeOMBOMB memorandumSeptember 17, 2009Rescinded
M-09-29FY 2009 Reporting Instructions for the Federal Information Security Management Act and Agency Privacy ManagementOMBOMB memorandumAugust 20, 2009Rescinded
SP 800-53 Rev. 3Recommended Security Controls for Federal Information Systems and OrganizationsNISTNIST Special PublicationAugust 3, 2009Withdrawn
ISOO Notice 2009-15Further Definition of "Comparable Media" as it Relates to Delays in the Onset of Automatic DeclassificationNARAISOO noticeJuly 16, 2009Rescinded
ISOO Notice 2009-14Corrections to Citations in 32 C.F.R. Part 2001 Referencing Open Storage AreasNARAISOO noticeJune 9, 2009Rescinded
NoneClassified Information and Controlled Unclassified InformationWhite HousePresidential directiveMay 27, 2009In effect
ISOO Notice 2009-11Prohibited Use of the Markings "MR" (Manual Review) and "Source Marked MR, date of source [date]"NARAISOO noticeMay 8, 2009Rescinded
ISOO Notice 2009-12Prohibited Use of the Marking "OADR"NARAISOO noticeMay 8, 2009Rescinded

What the statuses mean

In effect
Still in force, possibly with amendments.
Proposed
A proposed rule or draft. It may change before it takes effect.
Superseded
Replaced by a newer document or edition.
Rescinded
Cancelled by its issuer.
Withdrawn
Withdrawn by its issuer (NIST's term).
Retired
Closed by its issuer (CISA's term for a directive that has done its job).
Expired
Lapsed on its own terms.

Names on this page

AI
Artificial intelligence
BOD
Binding Operational Directive, issued by CISA
CISA
Cybersecurity and Infrastructure Security Agency
CUI
Controlled Unclassified Information
DFARS
Defense Federal Acquisition Regulation Supplement, the Department of Defense's additions to the FAR
DoD
Department of Defense
ED
Emergency Directive, issued by CISA
EO
Executive order
FAR
Federal Acquisition Regulation, the rules for federal contracts
FASC
Federal Acquisition Security Council
FedRAMP
Federal Risk and Authorization Management Program, run by GSA
FIPS
Federal Information Processing Standard, published by NIST
FISMA
Federal Information Security Modernization Act
GSA
General Services Administration
ISOO
Information Security Oversight Office, part of NARA
IT
Information technology
MFA
Multifactor authentication
NARA
National Archives and Records Administration
NIST
National Institute of Standards and Technology
OMB
Office of Management and Budget
OPM
Office of Personnel Management
PIV
Personal Identity Verification, the federal employee ID card
SBOM
Software bill of materials: a list of the parts in a piece of software

Get new governance by email

A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.

Send me

We use your address only to send what you choose, and every email has a one-click unsubscribe. Read the privacy notice.