Executive Orders

We have serious problems, and we need serious people to solve them.

Over the last decade, multiple Executive Orders have been created to address the nation's cybersecurity posture. The most recent three (3) are summarized below. While they may feel somewhat redundant, each is built upon the one before, attempting to specify and address the most emergent threat at the time. It follows that the most recent, Executive Order 14028, is both the most specific and broad, as that is a reflection of the technology space itself. The differentiating factor now is the fact that the stakes are higher as we become more reliant upon technology.

At eruditeMETA, our platform is built upon the standards set in these Orders, and we are adding reports and supporting new formats as they are defined. We support your present and future needs... and then some.

Learn More

EO 13636

On February 12, 2013, President Obama signed Executive Order 13636, "Improving Critical Infrastructure Cybersecurity." The EO was designed to increase the level of core capabilities for the nation's critical infrastructure to manage cyber risk. It focused on three key areas: (1) information sharing, (2) privacy, and (3) the adoption of cybersecurity practices.

The EO tasked the National Institute for Standards and Technology (NIST) to work with the private sector to identify existing voluntary consensus standards and industry best practices and build them in to a Cybersecurity Framework. As several private-sector cyber leaders were already implementing strong cybersecurity controls, policies, procedures, and innovations, the president asked these companies to help shape those best practices across critical infrastructure The President then directed DHS to establish a voluntary program to promote the adoption of the Framework.

CISA - Executive Order 13636

Federal Register - Improving Critical Infrastructure Cybersecurity (Local PDF)

DHS - Incentives Study Analytic Report (Local PDF)

EO 13800

President Trump issued Executive Order 13800, "Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure" on May 11, 2017, to improve the nation's cyber posture and capabilities in the face of intensifying cybersecurity threats. EO 13800 focused Federal efforts on modernizing Federal information technology infrastructure, working with state and local government and private sector partners to more fully secure critical infrastructure, and collaborating with foreign allies.

The work undertaken to implement EO 13800 was intended to reflect the strong partnership across the Federal Government and with industry partners to safeguard the security of critical infrastructure and reduce national cybersecurity risk.

In September of 2018, President Trump issued a document outlining a "National Cyber Strategy" to organize the nation's cybersecurity efforts around fundamental pillars.

CISA - Executive Order 13800

Trump White House Archives - Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure

Trump White House Archives - National Cyber Strategy (Local PDF)

EO 14028

On May 12, 2021, President Biden signed Executive Order 14028, "Improving the Nation's Cybersecurity," to support our nation's cybersecurity and protect the critical infrastructure and Federal Government networks underlying our nation's economy and way of life.

The EO charged multiple agencies, including NIST, with enhancing cybersecurity through a variety of initiatives related to the security and integrity of software supply chain.

This EO differed by setting several deadlines, effectively creating milestones in delivery and specifying responsible parties for each.

NIST, NSA, OMB, CISA, and DNI - Define "critical software" by June 26, 2021.
NIST - Publish guidance outlining security measure for critical software and guidelines for minimum standards for vendors testing of software source code by July 11, 2021.
NIST - Publish preliminary guidelines for software supply chain security by November 8, 2021.
NIST - Issue guidance identifying practices by February 6, 2022.
NIST - Publish additional guidelines for procedures and review by May 6, 2022.
NIST - Initiate two labeling programs related to IoT and software to inform consumers about the security of their products by February 6, 2022.

CISA - Executive Order 14028

Federal Register - Improving the Nation's Cybersecurity (Local PDF)