{"id":4097,"date":"2026-01-13T09:05:18","date_gmt":"2026-01-13T09:05:18","guid":{"rendered":"https:\/\/ft365.org\/index.php\/2026\/01\/13\/cisa-closes-ten-emergency-directives-after-federal-cyber-reviews\/"},"modified":"2026-01-13T09:05:18","modified_gmt":"2026-01-13T09:05:18","slug":"cisa-closes-ten-emergency-directives-after-federal-cyber-reviews","status":"publish","type":"post","link":"https:\/\/ft365.org\/index.php\/2026\/01\/13\/cisa-closes-ten-emergency-directives-after-federal-cyber-reviews\/","title":{"rendered":"CISA Closes Ten Emergency Directives After Federal Cyber Reviews"},"content":{"rendered":"
\n

Ten Emergency Directives issued between 2019 and 2024 have been formally retired by the US Cybersecurity and Infrastructure Security Agency (CISA) following a review that found their objectives had been met.<\/p>\n

The decision marks the most significant number of Emergency Directives closed at once and reflects changes in how cyber-risk is managed across federal civilian agencies.<\/p>\n

The update follows CISA\u2019s assessment that required remediation actions have either been fully implemented by Federal Civilian Executive Branch agencies or incorporated into Binding Operational Directive 22-01.<\/p>\n

That standing directive addresses the ongoing risk posed by known exploited vulnerabilities (KEVs) and now serves as the primary mechanism for managing those issues.<\/p>\n

From Temporary Mandates to Ongoing Controls<\/h2>\n

Emergency Directives are issued to address urgent and imminent threats and are intended to remain active only as long as necessary. CISA said sustained coordination with federal agencies helped resolve the underlying risks, embed cybersecurity best practices and reduce reliance on time-limited emergency measures.<\/p>\n

\u201cAs the operational lead for federal cybersecurity, CISA leverages its authorities to strengthen federal systems and defend against unacceptable risks,\u201d said\u00a0acting director, Madhu Gottumukkala.<\/p>\n

\u201cThe closure of these ten Emergency Directives reflects CISA\u2019s commitment to operational collaboration across the federal enterprise.\u201d<\/p>\n

Several of the retired directives were linked to specific Common Vulnerabilities and Exposures (CVEs). Those issues are now tracked through CISA\u2019s KEV catalog, which standardizes how agencies identify and remediate widely exploited flaws.\u00a0<\/p>\n

Read more on federal cybersecurity: US Federal Judiciary Tightens Security Following Escalated Cyber-Attacks<\/em><\/p>\n

Emergency Directives Now Closed<\/h2>\n

The directives no longer in force include:<\/p>\n