cisagov / cyber.dhs.gov

A site for CISA directives

https://cyber.dhs.gov

cisagov/cyber.dhs.gov Issues

Prepare for repo archive by creating redirect to cisa.gov/directives externally
Updated a year ago3
RSS Feeds for Site Updates
Closed 2 years ago5
Idea: Coordination with CISA Chief Data Officer to implement data standards for this list (and systems that use it).
Closed 2 years ago1
BOD 18-01 references M-15-13, but does not include a duration.
Closed 3 years ago3
Public Comment from Casey Ellis, Bugcrowd re DRAFT BOD 20-01
Closed 4 years ago
Update the .docx VDP template
Closed 4 years ago
Needs updating to check for KB4566425
Closed 4 years ago2
Run this script on all the domain hosts.
Closed 4 years ago2
CVE-2020-1472.ps1: if-else formatting: 'else' cannot appear on its own line in PS 5.1
Closed 4 years ago2
Output System.Object
Closed 4 years ago2
VE-2020-1472.ps1 assumes insecure WinRM protocol, Fails when using TLS
Closed 4 years ago1
Missing footnote on Vulnerability Disclosure Policy
Closed 4 years ago1
Emailed comments from Ryan Ellis, Katie Moussouris, Yuan Stevens
Closed 4 years ago
Emailed comments from the Department of the Treasury
Closed 4 years ago
Emailed comment from the Department of Justice (CISO)
Closed 4 years ago
Emailed comments from Federal Deposit Insurance Corporation, Office of Inspector General
Closed 4 years ago
Emailed comments from IBM
Closed 4 years ago
Comments from the U.S. Department of Transportation (CISO + All)
Closed 4 years ago1
Emailed comments from the Internal Revenue Service
Closed 4 years ago
Emailed comments from Senator Amy Klobuchar
Closed 4 years ago
Emailed comments from Congressman James R. Langevin and Leader Kevin McCarthy
Closed 4 years ago
Comments from General Service Administration (GSA) Technology Transformation Services (TTS)
Closed 4 years ago
Emailed comments from the Federal Deposit Insurance Corporation
Closed 4 years ago
Emailed comments from the Department of Education, Office of Inspector General
Closed 4 years ago
Public comment from Andy Brody - BOD 20-01
Closed 4 years ago
Consider an information sharing "industry day" to help agencies fully understand BOD requirements
Closed 4 years ago
[20-01] Agency expectations, budget, and performance
Closed 4 years ago
Emailed comment from the Cybersecurity Coalition
Closed 4 years ago
Emailed comment from the Information Technology Industry Council (ITI)
Closed 4 years ago
Recommend Availability of Encryption (i.e.: PGP) to secure report submission
Closed 4 years ago1
Emailed comment from the Department of Energy
Closed 4 years ago7
Emailed comment from Rapid7
Closed 4 years ago
Emailed comment from the Department of Commerce
Closed 4 years ago1
Emailed comment from Microsoft
Closed 4 years ago
Emailed comment from the General Services Administration
Closed 4 years ago1
Emailed comment from BSA | The Software Alliance
Closed 4 years ago
Emailed Comment from IBM X-Force IRIS
Closed 4 years ago
Consider adding references to alternative prioritization schemes
Closed 4 years ago
Reporting requirements and metrics may under-represent long-lived reports
Closed 4 years ago1
Add "safety" to "security and privacy"
Closed 4 years ago
Clarify to whom the vulnerability is being disclosed
Closed 4 years ago
Are vulnerabilities found in Government created apps in scope?
Closed 4 years ago1
Reorient problem statements to future desired state
Closed 4 years ago1
People Reporting Bugs Should Always Be Anonymous
Closed 4 years ago4
Suggestions on "Consequences of complying with this policy"
Closed 4 years ago
Consider a more explicit acknowledgement that not all vulnerabilities are created equal
Closed 4 years ago
Comment on target timelines for Response & Remediation activities
Closed 4 years ago
Explicit requirement for inclusion of agency OGC in policy development
Closed 4 years ago4
Emailed comment from the Consumer Financial Protection Bureau (CFPB)
Closed 4 years ago
Emailed comment from the Center for Democracy & Technology (CDT)
Closed 4 years ago