Governance tracker
Federal cybersecurity, privacy, and technology governance
Every federal cybersecurity, privacy, and information technology (IT) governance document from the Privacy Act of 1974 to today: laws, executive orders, memoranda, directives, standards, and contract rules.
FedXchange's watch checks the Cybersecurity and Infrastructure Security Agency (CISA), the Office of Management and Budget (OMB), the National Archives (NARA), and the Federal Register every day, and the National Institute of Standards and Technology (NIST) every week. New finds appear here the day they are found. The tracker lists public documents only.
Get new governance by emailWhat the statuses meanNames on this page
Found in the last 7 days
Nothing new in the last 7 days.
Filters
Results
4 documents match these filters
Filters: Logging and monitoring.
Governance documents, sorted by date issued, newest first. Page 1 of 1.
The table scrolls sideways. Each title opens the document's page.
| Number, sort A to Z | Title, sort A to Z | Issuer, sort A to Z | Type | Issued, sort oldest first | Status, sort A to Z |
|---|---|---|---|---|---|
| None | Logging Reference Architecture | CISA | CISA guidance | August 2026 | In effect |
| M-26-14 | Ensuring Effective and Efficient Agency Logging and Network Visibility to Defend Against Evolving Cyber Threats | OMB | OMB memorandum | May 22, 2026 | In effect |
| None | V1: ED 26-03: Mitigate Vulnerabilities in Cisco SD-WAN Systems | CISA | CISA guidance | March 11, 2026 | In effect |
| M-21-31 | Improving the Federal Government's Investigative and Remediation Capabilities Related to Cybersecurity Incidents | OMB | OMB memorandum | August 27, 2021 | Rescinded |
What the statuses mean
- In effect
- Still in force, possibly with amendments.
- Proposed
- A proposed rule or draft. It may change before it takes effect.
- Superseded
- Replaced by a newer document or edition.
- Rescinded
- Cancelled by its issuer.
- Withdrawn
- Withdrawn by its issuer (NIST's term).
- Retired
- Closed by its issuer (CISA's term for a directive that has done its job).
- Expired
- Lapsed on its own terms.
Names on this page
- AI
- Artificial intelligence
- BOD
- Binding Operational Directive, issued by CISA
- CISA
- Cybersecurity and Infrastructure Security Agency
- CUI
- Controlled Unclassified Information
- DFARS
- Defense Federal Acquisition Regulation Supplement, the Department of Defense's additions to the FAR
- DoD
- Department of Defense
- ED
- Emergency Directive, issued by CISA
- EO
- Executive order
- FAR
- Federal Acquisition Regulation, the rules for federal contracts
- FASC
- Federal Acquisition Security Council
- FedRAMP
- Federal Risk and Authorization Management Program, run by GSA
- FIPS
- Federal Information Processing Standard, published by NIST
- FISMA
- Federal Information Security Modernization Act
- GSA
- General Services Administration
- ISOO
- Information Security Oversight Office, part of NARA
- IT
- Information technology
- MFA
- Multifactor authentication
- NARA
- National Archives and Records Administration
- NIST
- National Institute of Standards and Technology
- OMB
- Office of Management and Budget
- OPM
- Office of Personnel Management
- PIV
- Personal Identity Verification, the federal employee ID card
- SBOM
- Software bill of materials: a list of the parts in a piece of software
Get new governance by email
A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.