The U.S. Cybersecurity and Infrastructure Agency (CISA) has ordered federal agencies to secure their cloud environments. They have issued a binding operational directive (BOD 25-01) which will mandate federal civilian agencies to improve their cybersecurity. The directive establishes three deadlines for the agencies in 2025. CISA’s guidance can additionally be applied to other organizations who are being targeted by malicious actors. “The threat to cloud environments extends to every sector,” said CISA Director Jen Easterly. 

Read more: https://www.helpnetsecurity.com/2024/12/19/cisa-bod-25-01-directive-secure-microsoft-cloud-environments/