The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has established mandatory deadlines for federal civilian agencies to remove unsupported network edge devices from their operating environments. Binding Operational Directive 26-02, issued February 5, 2026, requires agencies to identify affected equipment and decommission devices that can no longer receive appropriate vendor security support. The first major removal deadline arrives in February 2027, followed by a broader decommissioning requirement in August 2027.
Compliance Standards · Pulse
Continue reading with Pulse
This analysis is available to CS Clients and Pulse subscribers.
Subscribe to PulseAlready a subscriber? Log in