The Implications of CISA BOD 23-02 on Internet-Exposed Management Interfaces for Federal Organizations

This report explains CISA’s BOD 23-02, which requires federal agencies to identify and remediate internet-exposed management interfaces within 14 days by isolating them from the internet or enforcing Zero Trust-based access controls. It highlights the risks of exposed interfaces (e.g., HTTP/HTTPS panels, VPNs, firewalls) that have been exploited in past ransomware and espionage incidents, and emphasizes attack surface discovery and continuous monitoring—citing Recorded Future’s Attack Surface Intelligence—as key to identifying, protecting, and monitoring these assets.