CISA Issues Directive Requiring FCEB Agencies to Mitigate the Risk From Internet-Exposed Management Interfaces

Agencies must remove identified networked management interfaces from exposure to the internet or protect them with Zero-Trust capabilities that implement a policy enforcement point separate from the interface itself.