Governance tracker

Federal cybersecurity, privacy, and technology governance

Every federal cybersecurity, privacy, and information technology (IT) governance document from the Privacy Act of 1974 to today: laws, executive orders, memoranda, directives, standards, and contract rules.

FedXchange's watch checks the Cybersecurity and Infrastructure Security Agency (CISA), the Office of Management and Budget (OMB), the National Archives (NARA), and the Federal Register every day, and the National Institute of Standards and Technology (NIST) every week. New finds appear here the day they are found. The tracker lists public documents only.

Get new governance by email What the statuses mean Names on this page

Found in the last 7 days

Nothing new in the last 7 days.

Filters

631 documents

Showing 551 to 600.

Governance documents, sorted by date issued, newest first. Page 12 of 13.

The table scrolls sideways. Each title opens the document's page.

Governance documents, sorted by date issued, newest first. Page 12 of 13.
Number, sort A to Z	Title, sort A to Z	Issuer, sort A to Z	Type	Issued, sort oldest first	Status, sort A to Z
M-05-08	Designation of Senior Agency Officials for Privacy	OMB	OMB memorandum	February 11, 2005	Rescinded
M-05-05	Electronic Signatures: How to Mitigate the Risk of Commercial Managed Services	OMB	OMB memorandum	December 20, 2004	Rescinded
M-05-04	Policies for Federal Agency Public Websites	OMB	OMB memorandum	December 17, 2004	Rescinded
M-04-26	Personal Use Policies and "File Sharing" Technology	OMB	OMB memorandum	September 8, 2004	Rescinded
HSPD-12	Policy for a Common Identification Standard for Federal Employees and Contractors	White House	Presidential directive	August 27, 2004	In effect
M-04-25	FY 2004 Reporting Instructions for the Federal Information Security Management Act	OMB	OMB memorandum	August 23, 2004	Rescinded
M-04-16	Software Acquisition	OMB	OMB memorandum	July 1, 2004	In effect
SP 800-63	Electronic Authentication Guideline	NIST	NIST Special Publication	June 30, 2004	Withdrawn
5 CFR 930.301	Information Security Responsibilities for Employees who Manage or Use Federal Information Systems	OPM	Regulation	June 14, 2004	In effect
SP 800-60 Vol. 1	Guide for Mapping Types of Information and Information Systems to Security Categories	NIST	NIST Special Publication	June 10, 2004	Withdrawn
SP 800-37	Guide for the Security Certification and Accreditation of Federal Information Systems	NIST	NIST Special Publication	May 20, 2004	Withdrawn
FIPS 199	Standards for Security Categorization of Federal Information and Information Systems	NIST	FIPS standard	February 2004	In effect
SP 800-61	Computer Security Incident Handling Guide	NIST	NIST Special Publication	January 16, 2004	Withdrawn
HSPD-7	Critical Infrastructure Identification, Prioritization, and Protection	White House	Presidential directive	December 17, 2003	Superseded
M-04-04	E-Authentication Guidance for Federal Agencies	OMB	OMB memorandum	December 16, 2003	Rescinded
SP 800-50	Building an Information Technology Security Awareness and Training Program	NIST	NIST Special Publication	October 2003	Withdrawn
M-03-22	OMB Guidance for Implementing the Privacy Provisions of the E-Government Act of 2002	OMB	OMB memorandum	September 26, 2003	In effect
None	Employees Responsible for the Management or Use of Federal Computer Systems	OPM	Proposed rule	September 4, 2003	Superseded
M-03-19	Reporting Instructions for the Federal Information Security Management Act and Updated Guidance on Quarterly IT Security Reporting	OMB	OMB memorandum	August 6, 2003	Rescinded
M-03-18	Implementation Guidance for the E-Government Act of 2002	OMB	OMB memorandum	August 1, 2003	In effect
M-03-14	Reducing Cost and Improving Quality in Federal Purchases of Commercial Software	OMB	OMB memorandum	June 2, 2003	Rescinded
EO 13292	Further Amendment to Executive Order 12958, as Amended, Classified National Security Information	White House	Executive order	March 25, 2003	Superseded
Pub. L. 107-347	E-Government Act of 2002	Congress	Law	December 17, 2002	In effect
Pub. L. 107-347, Title III	Federal Information Security Management Act of 2002	Congress	Law	December 17, 2002	Superseded
Pub. L. 107-347, Title V	Confidential Information Protection and Statistical Efficiency Act of 2002	Congress	Law	December 17, 2002	Superseded
Pub. L. 107-305	Cyber Security Research and Development Act	Congress	Law	November 27, 2002	In effect
Pub. L. 107-296	Homeland Security Act of 2002	Congress	Law	November 25, 2002	In effect
M-02-09	Reporting Instructions for the Government Information Security Reform Act and Updated Guidance on Security Plans of Action and Milestones	OMB	OMB memorandum	July 2, 2002	Rescinded
SP 800-30	Risk Management Guide for Information Technology Systems	NIST	NIST Special Publication	July 2002	Withdrawn
SP 800-34	Contingency Planning Guide for Information Technology Systems	NIST	NIST Special Publication	June 13, 2002	Withdrawn
FIPS 197	Advanced Encryption Standard (AES)	NIST	FIPS standard	November 26, 2001	In effect
M-02-01	Guidance for Preparing and Submitting Security Plans of Action and Milestones	OMB	OMB memorandum	October 17, 2001	In effect
EO 13231	Critical Infrastructure Protection in the Information Age	White House	Executive order	October 16, 2001	In effect
M-01-24	Reporting Instructions for the Government Information Security Reform Act	OMB	OMB memorandum	June 22, 2001	Rescinded
FIPS 140-2	Security Requirements for Cryptographic Modules	NIST	FIPS standard	May 25, 2001	Superseded
M-01-08	Guidance on Implementing the Government Information Security Reform Act	OMB	OMB memorandum	January 16, 2001	Rescinded
M-01-05	Guidance on Inter-Agency Sharing of Personal Data - Protecting Personal Privacy	OMB	OMB memorandum	December 20, 2000	In effect
Circular A-130	Management of Federal Information Resources	OMB	OMB circular	November 28, 2000	Superseded
Pub. L. 106-398, Title X, Subtitle G	Government Information Security Reform	Congress	Law	October 30, 2000	Superseded
M-00-15	OMB Guidance on Implementing the Electronic Signatures in Global and National Commerce Act	OMB	OMB memorandum	September 25, 2000	In effect
M-00-13	Privacy Policies and Data Collection on Federal Web Sites	OMB	OMB memorandum	June 22, 2000	Rescinded
M-00-10	OMB Procedures and Guidance on Implementing the Government Paperwork Elimination Act	OMB	OMB memorandum	April 25, 2000	In effect
M-00-07	Incorporating and Funding Security in Information Systems Investments	OMB	OMB memorandum	February 28, 2000	Rescinded
None	Memorandum on Electronic Government	White House	Presidential directive	December 17, 1999	In effect
EO 13130	National Infrastructure Assurance Council	White House	Executive order	July 14, 1999	Superseded
M-99-20	Security of Federal Automated Information Resources	OMB	OMB memorandum	June 23, 1999	Rescinded
M-99-18	Privacy Policies on Federal Web Sites	OMB	OMB memorandum	June 2, 1999	Superseded
M-99-05	Instructions on Complying with President's Memorandum of May 14, 1998, "Privacy and Personal Information in Federal Records"	OMB	OMB memorandum	January 7, 1999	Superseded
Pub. L. 105-277, Div. C, Title XVII	Government Paperwork Elimination Act	Congress	Law	October 21, 1998	In effect
EO 13103	Computer Software Piracy	White House	Executive order	September 30, 1998	In effect

What the statuses mean

In effect: Still in force, possibly with amendments.
Proposed: A proposed rule or draft. It may change before it takes effect.
Superseded: Replaced by a newer document or edition.
Rescinded: Cancelled by its issuer.
Withdrawn: Withdrawn by its issuer (NIST's term).
Retired: Closed by its issuer (CISA's term for a directive that has done its job).
Expired: Lapsed on its own terms.

Names on this page

AI: Artificial intelligence
BOD: Binding Operational Directive, issued by CISA
CISA: Cybersecurity and Infrastructure Security Agency
CUI: Controlled Unclassified Information
DFARS: Defense Federal Acquisition Regulation Supplement, the Department of Defense's additions to the FAR
DoD: Department of Defense
ED: Emergency Directive, issued by CISA
EO: Executive order
FAR: Federal Acquisition Regulation, the rules for federal contracts
FASC: Federal Acquisition Security Council
FedRAMP: Federal Risk and Authorization Management Program, run by GSA
FIPS: Federal Information Processing Standard, published by NIST
FISMA: Federal Information Security Modernization Act
GSA: General Services Administration
ISOO: Information Security Oversight Office, part of NARA
IT: Information technology
MFA: Multifactor authentication
NARA: National Archives and Records Administration
NIST: National Institute of Standards and Technology
OMB: Office of Management and Budget
OPM: Office of Personnel Management
PIV: Personal Identity Verification, the federal employee ID card
SBOM: Software bill of materials: a list of the parts in a piece of software

A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.

Federal cybersecurity, privacy, and technology governance

Found in the last 7 days

Filters

Results

What the statuses mean

Names on this page

Get new governance by email