What Does the M-21-31 Requirement Mean for Federal Agencies?

Originally published by Axonius. Written by Tom Kennedy. The cybersecurity memorandum M-21-31, from the Office of Management and Budget, provides guidance on how to stop this type of leapfrogging before it can begin. M-21-31 focuses on visibility and incident response, and establishes a four-tier maturity model to help government agencies prioritize efforts and measure progress. The road to M-21-31 maturity There are two big pushes in the memorandum. The first is logging. Most organizat...

axonius big budget cybersecurity federal federal agencies government guidance incident incident response kennedy management maturity measure office office of management and budget progress response visibility