Compliance & Privacy
CISA
Cybersecurity and Infrastructure Security Agency
The US federal agency responsible for cybersecurity guidance, vulnerability coordination, and critical infrastructure protection. CISA publishes the Known Exploited Vulnerabilities (KEV) catalog, issues binding operational directives for federal agencies, and coordinates vulnerability disclosure. For private companies, CISA guidance on memory-safe languages, SBOM adoption, and secure-by-design principles increasingly sets market expectations.