Strengthening and Promoting Innovation in the Nation's Cybersecurity
Published Date: 1/17/2025
Presidential Document
Summary
The President is stepping up the fight against cyber threats, especially from countries like China, by making government and private sector digital systems safer and smarter. New rules will hold software and cloud companies more accountable and push for cool, cutting-edge tech to protect our online world. These changes start now and aim to save billions while keeping Americans’ data and services secure.
Analyzed Economic Effects
5 provisions identified: 1 benefits, 3 costs, 1 mixed.
Software Vendors Must Submit Attestations
Within 30 days of this order (January 16, 2025), OMB must recommend contract language requiring software providers to submit machine-readable secure-software development attestations, high-level artifacts, and a list of their Federal Civilian Executive Branch (FCEB) agency customers to CISA's Repository for Software Attestation and Artifacts (RSAA). CISA will centrally verify attestations, continuously validate samples, publicly post validation results identifying providers and software versions, and may refer failures to the Attorney General.
Federal Contractors Must Follow NIST Minimum Practices
The Secretary of Commerce (through NIST) will evaluate common industry practices and issue guidance identifying minimum cybersecurity practices within 240 days of the order (by September 13, 2025). Within 180 days after that guidance, the FAR Council will review it and the agency members shall take steps to amend the FAR to require contractors to follow those minimum cybersecurity practices when performing work for the Federal Government.
Consumer IoT Sold to Government Needs Cyber Trust Mark
The FAR Council is to adopt requirements so that vendors to the Federal Government of consumer Internet-of-Things (IoT) products must carry United States Cyber Trust Mark labeling for those products by January 4, 2027. Agencies are to adopt such requirements in contracts as appropriate.
Post-Quantum Cryptography and TLS Deadline
The order directs agencies to require products in categories where post-quantum cryptography (PQC) is widely available to support PQC within 90 days of being placed on a CISA product-category list. It also requires agencies (non-NSS) to support Transport Layer Security (TLS) protocol version 1.3 or a successor no later than January 2, 2030.
Encouraging Use of Digital IDs for Public Benefits
The order encourages agencies to accept digital identity documents to access public benefits programs if they preserve access for vulnerable populations and protect privacy. Within 270 days of the order (by October 14, 2025), NIST will issue practical implementation guidance to support remote digital identity verification using digital identity documents.
Personalized for You
How does this regulation affect your finances?
Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Key Dates
Related Federal Register Documents
2026-19417, Restoring American Saltwater Angling and Recreation
This order boosts saltwater fishing and recreation by cutting red tape and supporting coastal communities, anglers, and charter businesses. It calls for better data and teamwork between federal agencies and states to keep fishing fun and thriving. Changes start rolling out within 180 days, aiming to grow jobs and the outdoor economy without hurting access or the environment.
2026-19416, Reinvigorating America's Hunting Heritage
This order makes it easier for hunters to access federal lands and enjoy America’s great outdoors again. It cuts red tape, opens new hunting spots like Castle Mountains National Monument, and supports hunter education to keep wildlife healthy. Hunters, landowners, and outdoor lovers will see these changes roll out quickly, with some actions starting within 90 days and boosting conservation efforts nationwide.
2026-19335, Providing Meaningful Water Quality Improvements Through Collaboration and Oversight of Federal Support
This new order helps states and local governments work better together to improve water quality in the Chesapeake Bay without unfairly charging residents and small businesses extra fees. It focuses on clear rules and smart spending to keep the Bay healthy while supporting local economies. Starting now, federal support will be more closely watched to make sure every dollar helps clean water and communities thrive.
2026-19336, Restoring Reciprocity in Government Procurement
The U.S. government is fighting back against Canada’s 'Buy Canadian' rules that block American companies from Canadian government contracts. Starting now, U.S. agencies will look for Canadian-made products in federal buying and try to replace them with American alternatives. This move affects billions in government spending and aims to level the playing field for U.S. businesses.
2026-19333, Constitution Day, Citizenship Day, and Constitution Week, 2026
In 2026, we celebrate Constitution Day, Citizenship Day, and Constitution Week to honor the 239th anniversary of the U.S. Constitution. This proclamation reminds all Americans of the freedoms and responsibilities that come with being part of this great nation. No changes or costs are involved—just a proud moment to reflect on our shared values and history.
2026-19334, National POW/MIA Recognition Day, 2026
On National POW/MIA Recognition Day 2026, we honor the brave American service members who were prisoners of war or are still missing. The government proudly flies the POW/MIA flag and supports efforts to find and identify missing heroes, like the recent milestone of 800 Korean War identifications. This day reminds us all to never forget their sacrifice and keep working until every last hero comes home.
Previous / Next Documents
Previous: 2025-01467, Providing for the Appointment of Alumni of AmeriCorps to the Competitive Service
AmeriCorps alumni who’ve completed at least 1,700 hours of service can now be hired for federal jobs without competing in the usual hiring process. This change helps the government tap into a skilled, service-minded workforce faster and easier, starting right after this order in January 2025. It’s a win-win: AmeriCorps members get more job opportunities, and the government gains talented employees without extra costs.
Next: 2025-01471, Orderly Implementation of the Air Toxics Standards for Ethylene Oxide Commercial Sterilizers
The government is rolling out new air pollution rules for places that sterilize medical products using ethylene oxide (EtO), a chemical linked to cancer risks. These rules help protect communities, especially kids, by cutting harmful emissions while making sure hospitals keep getting the medical supplies they need. Sterilization facilities must upgrade their equipment soon, which might cost money but will make the air safer for everyone.