Glossary: Vulnerability Management and Monitoring

Binding Operational Directive 22-01

Also written: BOD 22-01

A CISA directive that requires US federal agencies to fix each flaw in the KEV catalog by the due date listed with it. Private companies aren't bound by it, but many copy the idea and patch KEV flaws first.