CISA Orders Federal Agencies to Replace End of Life Edge Devices

The US Cybersecurity and Infrastructure Security Agency has ordered federal agencies to identify and remove network edge devices that no longer receive manufacturer security updates. The directive is binding and focuses on reducing exposure from unsupported hardware.

Key takeaways

• CISA has issued a mandatory directive covering unsupported edge devices.
• Agencies must identify and replace hardware without security updates.
• The focus is on reducing known and unmanaged cyber risk.
• The order applies across federal civilian agencies.

For IGT members, this directive reinforces the importance of hardware lifecycle visibility and support status. IT resellers, MSPs, and refurbishers should expect increased scrutiny around firmware support, secure redeployment, and compliance documentation when supplying enterprise customers.

Read the full article on BleepingComputer

New to IPT? Join verified buyers & suppliers to meet, talk and trade.