Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Securing Critical Software

The Executive Order (EO) on Improving the Nation’s Cybersecurity (14028) assigns NIST with specific directives relating to critical software.

First, NIST is to consult with the National Security Agency (NSA), Office of Management and Budget (OMB), Cybersecurity & Infrastructure Security Agency (CISA), and the Director of National Intelligence (DNI) and then to define “critical software” by June 26, 2021.  

Second, NIST is to publish guidance outlining security measures  for critical software by July 11, 2021, after consulting with CISA and OMB. 

EO critical software timeline
Created July 8, 2021, Updated May 5, 2022