Federal agencies are remediating critical and high vulnerabilities in their IT systems within the allotted time frame only about half the time, according to figures within the Department of Homeland Security’s (DHS) fiscal year 2020 congressional budget justification. […]

A new binding operational directive (BOD) from the Department of Homeland Security (DHS) released Monday, April 29, requires agencies to remediate critical vulnerabilities identified by the Cybersecurity and Infrastructure Security Agency (CISA) within 15 days of detection, a reduction from 30 days. […]