It’s been two years since President Biden signed his landmark cybersecurity executive order, mandating zero trust adoption across the government and recognizing the importance of cloud adoption, cyber best practices, software supply chain integrity and information sharing. 

Furthermore, CISA’s recent binding operational directive (BOD) – which requires federal civilian agencies to remove specific networked management interfaces from the public-facing internet or implement zero trust architecture capabilities that enforce access control to the interface within 14 days of discovery – further amplifies the government’s push to mitigate cyber risk and resilience. 

Two years following the EO, what progress have we made, and what are the biggest opportunities for improvement? What are the remaining barriers to zero trust adoption and cloud migration, and how can enhanced visibility help agencies to better understand and defend their undiscovered, unmanaged or poorly managed IT assets?