Skip to content

Governance tracker

Federal cybersecurity, privacy, and technology governance

Every federal cybersecurity, privacy, and information technology (IT) governance document from the Privacy Act of 1974 to today: laws, executive orders, memoranda, directives, standards, and contract rules.

FedXchange's watch checks the Cybersecurity and Infrastructure Security Agency (CISA), the Office of Management and Budget (OMB), the National Archives (NARA), and the Federal Register every day, and the National Institute of Standards and Technology (NIST) every week. New finds appear here the day they are found. The tracker lists public documents only.

Get new governance by emailWhat the statuses meanNames on this page

Found in the last 7 days

Nothing new in the last 7 days.

Skip to the results

Filters

Results

74 documents match these filters

Filters: IT management and modernization.

Showing 51 to 74.

Governance documents, sorted by date issued, newest first. Page 2 of 2.

The table scrolls sideways. Each title opens the document's page.

Governance documents, sorted by date issued, newest first. Page 2 of 2.
Number, sort A to ZTitle, sort A to ZIssuer, sort A to ZTypeIssued, sort oldest firstStatus, sort A to Z
M-08-16Guidance for Trusted Internet Connection Statement of Capability Form (SOC)OMBOMB memorandumApril 4, 2008Rescinded
M-08-05Implementation of Trusted Internet Connections (TIC)OMBOMB memorandumNovember 20, 2007Rescinded
M-05-22Transition Planning for Internet Protocol Version 6 (IPv6)OMBOMB memorandumAugust 2, 2005Rescinded
M-05-04Policies for Federal Agency Public WebsitesOMBOMB memorandumDecember 17, 2004Rescinded
M-04-16Software AcquisitionOMBOMB memorandumJuly 1, 2004In effect
M-03-18Implementation Guidance for the E-Government Act of 2002OMBOMB memorandumAugust 1, 2003In effect
M-03-14Reducing Cost and Improving Quality in Federal Purchases of Commercial SoftwareOMBOMB memorandumJune 2, 2003Rescinded
Pub. L. 107-347E-Government Act of 2002CongressLawDecember 17, 2002In effect
Circular A-130Management of Federal Information ResourcesOMBOMB circularNovember 28, 2000Superseded
M-00-07Incorporating and Funding Security in Information Systems InvestmentsOMBOMB memorandumFebruary 28, 2000Rescinded
NoneMemorandum on Electronic GovernmentWhite HousePresidential directiveDecember 17, 1999In effect
Pub. L. 105-277, Div. C, Title XVIIGovernment Paperwork Elimination ActCongressLawOctober 21, 1998In effect
EO 13103Computer Software PiracyWhite HouseExecutive orderSeptember 30, 1998In effect
EO 13073Year 2000 ConversionWhite HouseExecutive orderFebruary 4, 1998In effect
M-97-16Information Technology ArchitecturesOMBOMB memorandumJune 18, 1997Rescinded
M-97-02Funding Information Systems InvestmentsOMBOMB memorandumOctober 25, 1996Rescinded
EO 13011Federal Information TechnologyWhite HouseExecutive orderJuly 16, 1996Rescinded
M-96-20Implementation of the Information Technology Management Reform Act of 1996OMBOMB memorandumApril 4, 1996Rescinded
Pub. L. 104-106, Div. EInformation Technology Management Reform Act of 1996 (Clinger-Cohen Act)CongressLawFebruary 10, 1996In effect
Pub. L. 104-13Paperwork Reduction Act of 1995CongressLawMay 22, 1995In effect
Circular A-130Management of Federal Information ResourcesOMBOMB circularJuly 15, 1994Superseded
Circular A-130Management of Federal Information ResourcesOMBOMB circularJune 25, 1993Superseded
Circular A-130Management of Federal Information ResourcesOMBOMB circularDecember 24, 1985Superseded
Pub. L. 96-511Paperwork Reduction Act of 1980CongressLawDecember 11, 1980Superseded

What the statuses mean

In effect
Still in force, possibly with amendments.
Proposed
A proposed rule or draft. It may change before it takes effect.
Superseded
Replaced by a newer document or edition.
Rescinded
Cancelled by its issuer.
Withdrawn
Withdrawn by its issuer (NIST's term).
Retired
Closed by its issuer (CISA's term for a directive that has done its job).
Expired
Lapsed on its own terms.

Names on this page

AI
Artificial intelligence
BOD
Binding Operational Directive, issued by CISA
CISA
Cybersecurity and Infrastructure Security Agency
CUI
Controlled Unclassified Information
DFARS
Defense Federal Acquisition Regulation Supplement, the Department of Defense's additions to the FAR
DoD
Department of Defense
ED
Emergency Directive, issued by CISA
EO
Executive order
FAR
Federal Acquisition Regulation, the rules for federal contracts
FASC
Federal Acquisition Security Council
FedRAMP
Federal Risk and Authorization Management Program, run by GSA
FIPS
Federal Information Processing Standard, published by NIST
FISMA
Federal Information Security Modernization Act
GSA
General Services Administration
ISOO
Information Security Oversight Office, part of NARA
IT
Information technology
MFA
Multifactor authentication
NARA
National Archives and Records Administration
NIST
National Institute of Standards and Technology
OMB
Office of Management and Budget
OPM
Office of Personnel Management
PIV
Personal Identity Verification, the federal employee ID card
SBOM
Software bill of materials: a list of the parts in a piece of software

Get new governance by email

A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.

Send me

We use your address only to send what you choose, and every email has a one-click unsubscribe. Read the privacy notice.