CISA Issues New Directive Improving How Federal Agencies Prioritize the Mitigation of Cyber Vulnerabilities WASHINGTON – The Cybersecurity and Infrastructure Security Agency (CISA) today issued Binding Operational Directive 26-04: Prioritizing Security Updates Based on Risk, that requires federal civilian agencies to assess and align their vulnerability management policies to reduce cybersecurity ...