CISA Retires Ten Emergency Directives Following Milestone Achievement

CISA announced the simultaneous retirement of ten Emergency Directives from 2019–2024, noting that their goals have been achieved and that related risks are now managed through ongoing programs (including the KEV catalog and BOD 22-01). The retired directives span critical issues such as DNS tampering, Windows, Netlogon, Print Spooler, Pulse Secure, VMware, SolarWinds, and Microsoft Exchange, reflecting a shift from emergency actions to institutionalized, Secure-by-Design practices across federal systems.