News Summary

• The u.s. Cybersecurity and Infrastructure Security Agency released a new directive on Wednesday.
• It requires more rapid and efficient software patching by federal civilian agencies.
• The directive lays out a rubric for how quickly bugs must be fixed based on four assessments of urgency, with a turnaround time in critical cases of just three days.
• The goal of the directive is to help agencies prioritize, so they can address the most problematic vulnerabilities first while taking more time to remediate bugs that pose a less-pressing risk.