US Executive Order 14144 - Strengthening and Promoting Innovation in the Nation's Cybersecurity

Executive Order 14144 of January 2025, as amended by Executive Order 14306 of June 2025, the US Federal cybersecurity order that builds on EO 14028: agencies manage supply chain risk under NIST SP 800-161 and their use of open source software, give CISA the endpoint detection data it needs to hunt threats, secure internet routing with registry agreements and Route Origin Authorizations, enable encrypted DNS, enforce encrypted email connections, encrypt voice, video and messaging by default, support TLS 1.3 by 2 January 2030 and inventory their major systems; cloud providers publish secure configuration baselines and protect signing keys and tokens under FedRAMP; internet providers, DNS product vendors and civil space contractors meet contract requirements; and vendors of consumer connected devices sold to the Government carry the US Cyber Trust Mark by 4 January 2027. It comprises 24 controls organised across 6 domains, and applies in the United States.