CISA Orders Federal Agencies to Strengthen Edge Device Security Amid Rising Cyber Threats
'New Binding Operational Directive Requires Removal of Unsupported Hardware and Software to Reduce Risk...To mitigate this threat, CISA is requiring FCEB agencies to adhere to standard lifecycle management processes and mandatory actions within the required time limit in this directive. Required actions in this directive include:
Update each vendor supported-edge device running end-of-support software to a vendor-supported software version .
Inventory all devices to identify those that are end-of-support and report to CISA.
Remove all edge devices that are end of support from agency networks and replace devices as needed with vendor-supported devices that can receive security updates.
Establish a mature lifecycle management process for continuous discovery of all edge devices and maintain an inventory of those that are or will become end-of-support.
“Unsupported devices pose a serious risk to federal systems and should never remain on enterprise networks,” said CISA Acting Director Madhu Gottumukkala. ...'
Reference: www.cisa.gov
Tags:
