CISA Directive Requires Federal Agencies to Secure Network Devices

By

CISA outlines steps needed for device compliance.

A new CISA directive requires agencies to “take steps to reduce the attack surface created by insecure or misconfigured management interfaces across certain classes of devices.”

The Binding Operational Directive 23-02, which outlines the steps required for compliance, defines a networked management interface as “a dedicated device interface that is accessible over network protocols and is meant exclusively for authorized users to perform administrative activities on a device, a group of devices, or the network itself.”

“Recent threat campaigns underscore the grave risk to the federal enterprise posed by improperly configured network devices.” the directive states.
 
 

 
 

06/30/2023

Related content

  • News for Admins
    In the news: CISA Directive Requires Federal Agencies to Secure Network Devices; SUSE Report Reveals Cloud Security Concerns; Canonical Sunbeam Extends OpenStack to Small Cloud Environments; IT Teams Struggle with Cloud Operations; NVIDIA Announces Large Memory AI Supercomputer; PostgreSQL 16 Beta; Red Hat Announces Ansible Lightspeed AI Service; Global Tech Adoption Trends from the World Economic Forum; and CIQ Announces New Infrastructure Management Platform.
  • Becrypt Launches tVolution
  • CISA Warns of Widespread Exploitation of Known Confluence Vulnerability
  • US Agencies Issue Quantum-Readiness Recommendations
  • News for Admins
    In the news: US Agencies Issue Quantum-Readiness Recommendations; Bitwarden Secrets Manager; IBM X-Force Releases Detection and Response Framework for Managed File Transfers; National Strategy to Expand US Cyber Workforce; SEC Adopts New Rules for Disclosure of Cybersecurity Incidents; Canonical Announces Real-Time Ubuntu for Intel Core; EU-US Data Privacy Framework Ensures Safe Data Transfers; IEEE Releases New Standard for LiFi Communications; EU Health Sector Security Risks; and JupyterLab 4.0.
comments powered by Disqus