CISA Directive Requires Federal Agencies to Secure Network Devices

By

CISA outlines steps needed for device compliance.

A new CISA directive requires agencies to “take steps to reduce the attack surface created by insecure or misconfigured management interfaces across certain classes of devices.”

The Binding Operational Directive 23-02, which outlines the steps required for compliance, defines a networked management interface as “a dedicated device interface that is accessible over network protocols and is meant exclusively for authorized users to perform administrative activities on a device, a group of devices, or the network itself.”

“Recent threat campaigns underscore the grave risk to the federal enterprise posed by improperly configured network devices.” the directive states.
 
 

 
 

06/30/2023

Related content

comments powered by Disqus