Skip to content
FedXchange
Menu

Governance tracker

Federal cybersecurity, privacy, and technology governance

Every federal cybersecurity, privacy, and information technology (IT) governance document from the Privacy Act of 1974 to today: laws, executive orders, memoranda, directives, standards, and contract rules.

FedXchange's watch checks the Cybersecurity and Infrastructure Security Agency (CISA), the Office of Management and Budget (OMB), the National Archives (NARA), and the Federal Register every day, and the National Institute of Standards and Technology (NIST) every week. New finds appear here the day they are found. The tracker lists public documents only.

Get new governance by emailWhat the statuses meanNames on this page

Found in the last 7 days

Nothing new in the last 7 days.

Skip to the results

Filters

Results

631 documents

Showing 401 to 450.

Governance documents, sorted by date issued, newest first. Page 9 of 13.

The table scrolls sideways. Each title opens the document's page.

Governance documents, sorted by date issued, newest first. Page 9 of 13.
Number, sort A to ZTitle, sort A to ZIssuer, sort A to ZTypeIssued, sort oldest firstStatus, sort A to Z
NoneEstablishment of the Cyber Threat Intelligence Integration CenterWhite HousePresidential directiveFebruary 25, 2015In effect
EO 13691Promoting Private Sector Cybersecurity Information SharingWhite HouseExecutive orderFebruary 13, 2015In effect
Pub. L. 113-291, Title VIII, Subtitle DFederal Information Technology Acquisition ReformCongressLawDecember 19, 2014In effect
Pub. L. 113-274Cybersecurity Enhancement Act of 2014CongressLawDecember 18, 2014In effect
Pub. L. 113-282National Cybersecurity Protection Act of 2014CongressLawDecember 18, 2014In effect
Pub. L. 113-283Federal Information Security Modernization Act of 2014CongressLawDecember 18, 2014In effect
SP 800-88 Rev. 1Guidelines for Media SanitizationNISTNIST Special PublicationDecember 17, 2014Withdrawn
SP 800-53A Rev. 4Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment PlansNISTNIST Special PublicationDecember 11, 2014Withdrawn
NonePolicies for Dot Gov Domain Issuance for Federal Agency Public WebsitesOMBOMB memorandumDecember 8, 2014Rescinded
Pub. L. 113-187Presidential and Federal Records Act Amendments of 2014CongressLawNovember 26, 2014In effect
EO 13681Improving the Security of Consumer Financial TransactionsWhite HouseExecutive orderOctober 17, 2014In effect
M-15-01Fiscal Year 2014-2015 Guidance on Improving Federal Information Security and Privacy Management PracticesOMBOMB memorandumOctober 3, 2014Rescinded
M-14-16Guidance on Managing EmailOMBOMB memorandumSeptember 15, 2014Rescinded
ISOO Notice 2014-04Agencies Eligible to Receive Referrals from Automatic Declassification at 25, 50, and 75 YearsNARAISOO noticeSeptember 5, 2014Rescinded
ISOO Notice 2014-03U.S. Protection of Information Shared by the Government of the United KingdomNARAISOO noticeAugust 27, 2014In effect
CUI Joint Memo 2014-07-03Revised Guidance regarding CUI and the Freedom of Information ActNARACUI noticeJuly 3, 2014Superseded
Pub. L. 113-101Digital Accountability and Transparency Act of 2014CongressLawMay 9, 2014In effect
ISOO Notice 2014-02Procurement of Security EquipmentNARAISOO noticeApril 4, 2014Rescinded
ISOO Notice 2014-01Appeal Rights for Mandatory Declassification Review Requests and the Rejection of Requests for Specific ReasonsNARAISOO noticeMarch 26, 2014In effect
CSWP 1Framework for Improving Critical Infrastructure Cybersecurity, Version 1.0NISTNIST frameworkFebruary 12, 2014Superseded
DFARS 252.204-7012Safeguarding Covered Defense Information and Cyber Incident ReportingDoDContract clauseNovember 18, 2013In effect
DFARS 252.239-7018Supply Chain RiskDoDContract clauseNovember 18, 2013In effect
M-14-03Enhancing the Security of Federal Information and Information SystemsOMBOMB memorandumNovember 18, 2013Rescinded
M-14-04Fiscal Year 2013 Reporting Instructions for the Federal Information Security Management Act and Agency Privacy ManagementOMBOMB memorandumNovember 18, 2013Superseded
ISOO Notice 2013-06Changes in Express MailNARAISOO noticeSeptember 18, 2013In effect
FIPS 201-2Personal Identity Verification (PIV) of Federal Employees and ContractorsNISTFIPS standardSeptember 5, 2013Withdrawn
SP 800-63-2Electronic Authentication GuidelineNISTNIST Special PublicationAugust 29, 2013Withdrawn
ISOO Notice 2013-05Revision of the Standard Form (SF) 312, "Classified Information Nondisclosure Agreement"NARAISOO noticeAugust 19, 2013In effect
M-13-20Protecting Privacy while Reducing Improper Payments with the Do Not Pay InitiativeOMBOMB memorandumAugust 16, 2013In effect
SP 800-40 Rev. 3Guide to Enterprise Patch Management TechnologiesNISTNIST Special PublicationJuly 22, 2013Withdrawn
FIPS 186-4Digital Signature Standard (DSS)NISTFIPS standardJuly 19, 2013Withdrawn
ISOO Notice 2013-04The National Security Staff (NSS) Partial Waiver for the Declassification Review of Select National Security Council and White House Classified RecordsNARAISOO noticeJune 14, 2013Rescinded
CUI Office Notice 2013-01Provisional Approval of Proposed CUI Categories and SubcategoriesNARACUI noticeMay 22, 2013Superseded
EO 13642Making Open and Machine Readable the New Default for Government InformationWhite HouseExecutive orderMay 9, 2013In effect
M-13-13Open Data Policy—Managing Information as an AssetOMBOMB memorandumMay 9, 2013Rescinded
SP 800-53 Rev. 4Security and Privacy Controls for Federal Information Systems and OrganizationsNISTNIST Special PublicationApril 30, 2013Withdrawn
CUI Memo 2013-04-11Appointments of Senior Agency Official and Program Manager for CUI Program ImplementationNARACUI noticeApril 11, 2013In effect
ISOO Notice 2013-03Processing of Mandatory Declassification Review Requests Appealed to the Interagency Security Classification Appeals PanelNARAISOO noticeApril 10, 2013In effect
EO 13636Improving Critical Infrastructure CybersecurityWhite HouseExecutive orderFebruary 12, 2013In effect
PPD-21Critical Infrastructure Security and ResilienceWhite HousePresidential directiveFebruary 12, 2013Superseded
ISOO Notice 2013-02Agencies Eligible to Receive Referrals from Automatic Declassification at 25, 50, and 75 YearsNARAISOO noticeJanuary 23, 2013Rescinded
ISOO Notice 2013-01Further Marking Guidance on Commingling North Atlantic Treaty Organization (NATO) and Classified National Security Information (NSI)NARAISOO noticeNovember 1, 2012In effect
ISOO Notice 2012-04Additional Guidance on Standards for Security EquipmentNARAISOO noticeOctober 12, 2012Rescinded
M-12-20FY 2012 Reporting Instructions for the Federal Information Security Management Act and Agency Privacy ManagementOMBOMB memorandumSeptember 27, 2012Superseded
SP 800-30 Rev. 1Guide for Conducting Risk AssessmentsNISTNIST Special PublicationSeptember 17, 2012In effect
NoneFederal Acquisition Regulation; Basic Safeguarding of Contractor Information SystemsFAR CouncilProposed ruleAugust 24, 2012Superseded
M-12-18Managing Government Records DirectiveOMBOMB memorandumAugust 24, 2012Rescinded
SP 800-61 Rev. 2Computer Security Incident Handling GuideNISTNIST Special PublicationAugust 6, 2012Withdrawn
CUI Memo 2012-07-27Review of Proposed Categories for CUI RegistryNARACUI noticeJuly 27, 2012Superseded
NoneFedRAMP becomes operationalGSA and FedRAMPFedRAMP policyJune 2012In effect

What the statuses mean

In effect
Still in force, possibly with amendments.
Proposed
A proposed rule or draft. It may change before it takes effect.
Superseded
Replaced by a newer document or edition.
Rescinded
Cancelled by its issuer.
Withdrawn
Withdrawn by its issuer (NIST's term).
Retired
Closed by its issuer (CISA's term for a directive that has done its job).
Expired
Lapsed on its own terms.

Names on this page

AI
Artificial intelligence
BOD
Binding Operational Directive, issued by CISA
CISA
Cybersecurity and Infrastructure Security Agency
CUI
Controlled Unclassified Information
DFARS
Defense Federal Acquisition Regulation Supplement, the Department of Defense's additions to the FAR
DoD
Department of Defense
ED
Emergency Directive, issued by CISA
EO
Executive order
FAR
Federal Acquisition Regulation, the rules for federal contracts
FASC
Federal Acquisition Security Council
FedRAMP
Federal Risk and Authorization Management Program, run by GSA
FIPS
Federal Information Processing Standard, published by NIST
FISMA
Federal Information Security Modernization Act
GSA
General Services Administration
ISOO
Information Security Oversight Office, part of NARA
IT
Information technology
MFA
Multifactor authentication
NARA
National Archives and Records Administration
NIST
National Institute of Standards and Technology
OMB
Office of Management and Budget
OPM
Office of Personnel Management
PIV
Personal Identity Verification, the federal employee ID card
SBOM
Software bill of materials: a list of the parts in a piece of software

Get new governance by email

A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.

Send me

We use your address only to send what you choose, and every email has a one-click unsubscribe. Read the privacy notice.