CISA Retires 10 Emergency Cybersecurity Directives Issued Between 2019 and 2024

According to CISA, ten emergency directives issued between 2019 and 2024 have now been retired amid efforts to bolster federal cybersecurity. The directives being closed include ED 19-01, ED 20-02, ED 20-03, ED 20-04, ED 21-01, ED 21-02, ED 21-03, ED 21-04, ED 22-03 and ED 24-02, each aimed at mitigating specific vulnerabilities or threats across federal systems. CISA said it collaborated with federal agencies to remediate these issues, incorporate best practices, and create a more resilient digital infrastructure.

The agency noted that the actions from these directives are now enforced through Binding Operational Directive 22-01, reducing the significant risk of known exploited vulnerabilities. As acting director Madhu Gottumukkala stated, the closure reflects the agency’s commitment to operational collaboration across the federal enterprise and to advancing Secure by Design principles to help diverse organisations defend their environments.