What is Binding Operational Directive?

“A Binding Operational Directive is a compulsory, enforceable instruction issued by the U.S. Cybersecurity and Infrastructure Security Agency to federal civilian executive branch agencies to manage known cybersecurity risks and enforce specific security measures within defined timeframes.” Expanded Explanation 1. Technical Function and Core Characteristics A Binding Operational Directive (BOD) is a legal instrument that CISA issues under statutory authority to direct federal civilian executive

How widely is Binding Operational Directive used?

116 articles reference Binding Operational Directive.

What is Binding Operational Directive most closely associated with?

Binding Operational Directive is most closely associated with Vulnerabilities and Known Exploited Vulnerabilities.

Binding Operational Directive (BOD)

Last updated August 24, 2026

Human View Machine View

This is the page you're already on — the Human View toggle above shows it in full.

A green key on the record, left, is one Decision Insights added. It doesn't exist on the company's site or in a wire feed. The same key labels its row on the right, so you can match them directly. More on how DI enriches a record.

The record

This is what the machine sees: the exact JSON-LD an agent receives for this listing.

WebSite

{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/#website",
  "@type": "WebSite",
  "name": "Decision Insights",
  "potentialAction": {
    "@type": "SearchAction",
    "target": {
      "@type": "EntryPoint",
      "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}\u0026submit=1"
    }
  },
  "publisher": {
    "@id": "https://decisioninsights.ai/#organization"
  },
  "url": "https://decisioninsights.ai"
}

Organization

{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/#organization",
  "@type": "Organization",
  "contactPoint": {
    "@type": "ContactPoint",
    "contactType": "customer support",
    "email": "[email protected]"
  },
  "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
  "logo": {
    "@type": "ImageObject",
    "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
  },
  "name": "Decision Insights",
  "parentOrganization": {
    "@type": "Organization",
    "name": "Wiretap Labs",
    "sameAs": [
      "https://www.linkedin.com/company/wiretap-labs",
      "https://www.crunchbase.com/organization/wiretap-labs"
    ],
    "url": "https://wiretaplabs.com"
  },
  "publishingPrinciples": "https://decisioninsights.ai/standards/",
  "sameAs": [
    "https://www.linkedin.com/company/decisioninsights"
  ],
  "url": "https://decisioninsights.ai"
}

BreadcrumbList

{
  "@context": "https://schema.org",
  "@type": "BreadcrumbList",
  "itemListElement": [
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai",
      "name": "Decision Insights",
      "position": 1
    },
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai/term/",
      "name": "Glossary",
      "position": 2
    },
    {
      "@type": "ListItem",
      "item": "https://decisioninsights.ai/term/binding-operational-directive-bod/",
      "name": "Binding Operational Directive",
      "position": 3
    }
  ]
}

DefinedTerm

{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/term/binding-operational-directive-bod/#definedterm",
  "@type": "DefinedTerm",
  "additionalProperty": [
    {
      "@type": "PropertyValue",
      "name": "Articles mentioning this entity",
      "value": 116
    },
    {
      "@type": "PropertyValue",
      "name": "Related terms",
      "valueReference": [
        {
          "@id": "https://decisioninsights.ai/term/dod-security/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/dod-security/",
          "name": "DoD Security"
        },
        {
          "@id": "https://decisioninsights.ai/term/operational-policy/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/operational-policy/",
          "name": "Operational Policy"
        },
        {
          "@id": "https://decisioninsights.ai/term/multi-domain-operations-mdo/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/multi-domain-operations-mdo/",
          "name": "Multi-Domain Operations"
        },
        {
          "@id": "https://decisioninsights.ai/term/bot-defense/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/bot-defense/",
          "name": "Bot Defense"
        },
        {
          "@id": "https://decisioninsights.ai/term/digital-operational-resilience-act-dora/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/digital-operational-resilience-act-dora/",
          "name": "Digital Operational Resilience Act"
        },
        {
          "@id": "https://decisioninsights.ai/term/separation-of-duties-sod/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/separation-of-duties-sod/",
          "name": "Separation of Duties"
        },
        {
          "@id": "https://decisioninsights.ai/term/operational-procedure/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/operational-procedure/",
          "name": "Operational Procedure"
        },
        {
          "@id": "https://decisioninsights.ai/term/security-configuration-baseline-scb/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/security-configuration-baseline-scb/",
          "name": "Security Configuration Baseline"
        }
      ]
    },
    {
      "@type": "PropertyValue",
      "name": "Related terms (co-occurring topics)",
      "valueReference": [
        {
          "@id": "https://decisioninsights.ai/term/vulnerabilities/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/vulnerabilities/",
          "name": "Vulnerabilities"
        },
        {
          "@id": "https://decisioninsights.ai/term/known-exploited-vulnerabilities-kev/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/known-exploited-vulnerabilities-kev/",
          "name": "Known Exploited Vulnerabilities"
        },
        {
          "@id": "https://decisioninsights.ai/term/common-vulnerabilities-and-exposures-cve/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/common-vulnerabilities-and-exposures-cve/",
          "name": "Common Vulnerabilities and Exposures"
        },
        {
          "@id": "https://decisioninsights.ai/term/enterprise/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/enterprise/",
          "name": "Enterprise"
        },
        {
          "@id": "https://decisioninsights.ai/term/cybersecurity/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/cybersecurity/",
          "name": "Cybersecurity"
        },
        {
          "@id": "https://decisioninsights.ai/term/network-operator/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/network-operator/",
          "name": "Network Operator"
        },
        {
          "@id": "https://decisioninsights.ai/term/operating-system/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/operating-system/",
          "name": "Operating System"
        },
        {
          "@id": "https://decisioninsights.ai/term/bandwidth-on-demand/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/bandwidth-on-demand/",
          "name": "Bandwidth on Demand"
        },
        {
          "@id": "https://decisioninsights.ai/term/remediation/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/remediation/",
          "name": "Remediation"
        },
        {
          "@id": "https://decisioninsights.ai/term/threats/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/threats/",
          "name": "Threats"
        },
        {
          "@id": "https://decisioninsights.ai/term/authentication/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/authentication/",
          "name": "Authentication"
        },
        {
          "@id": "https://decisioninsights.ai/term/cross-site-scripting-xss/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/cross-site-scripting-xss/",
          "name": "Cross-Site Scripting"
        },
        {
          "@id": "https://decisioninsights.ai/term/data-center/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/data-center/",
          "name": "Data Center"
        },
        {
          "@id": "https://decisioninsights.ai/term/server/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/server/",
          "name": "Server"
        },
        {
          "@id": "https://decisioninsights.ai/term/ai-infrastructure/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/ai-infrastructure/",
          "name": "AI infrastructure"
        },
        {
          "@id": "https://decisioninsights.ai/term/password/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/password/",
          "name": "Password"
        },
        {
          "@id": "https://decisioninsights.ai/term/server-message-block-smb/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/server-message-block-smb/",
          "name": "Server Message Block"
        },
        {
          "@id": "https://decisioninsights.ai/term/ai-artificial-intelligence/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/ai-artificial-intelligence/",
          "name": "Artificial Intelligence"
        },
        {
          "@id": "https://decisioninsights.ai/term/attack/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/attack/",
          "name": "Attack"
        },
        {
          "@id": "https://decisioninsights.ai/term/open-source/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/open-source/",
          "name": "Open Source"
        },
        {
          "@id": "https://decisioninsights.ai/term/router/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/router/",
          "name": "Router"
        },
        {
          "@id": "https://decisioninsights.ai/term/secure-access-service-edge-sase/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/secure-access-service-edge-sase/",
          "name": "Secure Access Service Edge"
        },
        {
          "@id": "https://decisioninsights.ai/term/secure-shell-ssh-protocol/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/secure-shell-ssh-protocol/",
          "name": "Secure Shell"
        },
        {
          "@id": "https://decisioninsights.ai/term/services/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/services/",
          "name": "Services"
        },
        {
          "@id": "https://decisioninsights.ai/term/access-control/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/access-control/",
          "name": "Access Control"
        },
        {
          "@id": "https://decisioninsights.ai/term/authorization/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/authorization/",
          "name": "Authorization"
        },
        {
          "@id": "https://decisioninsights.ai/term/compliance/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/compliance/",
          "name": "Compliance"
        },
        {
          "@id": "https://decisioninsights.ai/term/components/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/components/",
          "name": "Components"
        },
        {
          "@id": "https://decisioninsights.ai/term/cross-site-request-forgery-csrf/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/cross-site-request-forgery-csrf/",
          "name": "Cross-Site Request Forgery"
        },
        {
          "@id": "https://decisioninsights.ai/term/denial-of-service-dos/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/denial-of-service-dos/",
          "name": "Denial of Service"
        },
        {
          "@id": "https://decisioninsights.ai/term/encryption/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/encryption/",
          "name": "Encryption"
        },
        {
          "@id": "https://decisioninsights.ai/term/extended-detection-and-response-xdr/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/extended-detection-and-response-xdr/",
          "name": "Extended detection and response"
        },
        {
          "@id": "https://decisioninsights.ai/term/inclined-orbit-satellite-ios/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/inclined-orbit-satellite-ios/",
          "name": "Inclined Orbit Satellite"
        },
        {
          "@id": "https://decisioninsights.ai/term/model-context-protocol-mcp/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/model-context-protocol-mcp/",
          "name": "Model Context Protocol"
        },
        {
          "@id": "https://decisioninsights.ai/term/multifactor-authentication-mfa/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/multifactor-authentication-mfa/",
          "name": "Multifactor Authentication"
        },
        {
          "@id": "https://decisioninsights.ai/term/network-detection-and-response-ndr/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/network-detection-and-response-ndr/",
          "name": "Network Detection and Response"
        },
        {
          "@id": "https://decisioninsights.ai/term/networking/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/networking/",
          "name": "Networking"
        },
        {
          "@id": "https://decisioninsights.ai/term/partnership/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/partnership/",
          "name": "Partnership"
        },
        {
          "@id": "https://decisioninsights.ai/term/passive-optical-network-pon/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/passive-optical-network-pon/",
          "name": "Passive Optical Network"
        },
        {
          "@id": "https://decisioninsights.ai/term/phishing/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/phishing/",
          "name": "Phishing"
        },
        {
          "@id": "https://decisioninsights.ai/term/react/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/react/",
          "name": "ReAct"
        },
        {
          "@id": "https://decisioninsights.ai/term/secure-at-inception/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/secure-at-inception/",
          "name": "secure at inception"
        },
        {
          "@id": "https://decisioninsights.ai/term/session-initiation-protocol/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/session-initiation-protocol/",
          "name": "Session Initiation Protocol"
        },
        {
          "@id": "https://decisioninsights.ai/term/simple-network-management-protocol-snmp/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/simple-network-management-protocol-snmp/",
          "name": "Simple Network Management Protocol"
        },
        {
          "@id": "https://decisioninsights.ai/term/social-engineering/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/social-engineering/",
          "name": "Social Engineering"
        },
        {
          "@id": "https://decisioninsights.ai/term/sovereign-cloud-gk8lnq/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/sovereign-cloud-gk8lnq/",
          "name": "Sovereign cloud"
        },
        {
          "@id": "https://decisioninsights.ai/term/threat-detection/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/threat-detection/",
          "name": "Threat Detection"
        },
        {
          "@id": "https://decisioninsights.ai/term/vulnerability-assessment/#definedterm",
          "@type": "DefinedTerm",
          "mainEntityOfPage": "https://decisioninsights.ai/term/vulnerability-assessment/",
          "name": "Vulnerability Assessment"
        }
      ]
    }
  ],
  "description": "Binding Operational Directive is a mandatory cyber risk management order that the U.S. Cybersecurity and Infrastructure Security Agency issues to federal civilian executive branch agencies, requiring specific security actions, deadlines, and reporting to address defined vulnerabilities and strengthen the security of federal information systems.",
  "inDefinedTermSet": {
    "@id": "https://decisioninsights.ai/term/#termset",
    "@type": "DefinedTermSet",
    "url": "https://decisioninsights.ai/term/"
  },
  "name": "Binding Operational Directive",
  "subjectOf": [
    {
      "@id": "https://decisioninsights.ai/cisa-adds-geoserver-xxe-to-kev-catalog/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA adds GeoServer XXE to KEV catalog",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/12/11/cisa-adds-one-known-exploited-vulnerability-catalog"
      },
      "url": "https://decisioninsights.ai/cisa-adds-geoserver-xxe-to-kev-catalog/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-adds-cve-2025-6218-and-cve-2025-62221-to-kev-catalog/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA adds CVE-2025-6218 and CVE-2025-62221 to KEV catalog",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/12/09/cisa-adds-two-known-exploited-vulnerabilities-catalog"
      },
      "url": "https://decisioninsights.ai/cisa-adds-cve-2025-6218-and-cve-2025-62221-to-kev-catalog/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-updates-kev-catalog-with-two-vulnerabilities/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA updates KEV catalog with two vulnerabilities",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/12/08/cisa-adds-two-known-exploited-vulnerabilities-catalog"
      },
      "url": "https://decisioninsights.ai/cisa-updates-kev-catalog-with-two-vulnerabilities/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-adds-cve-2025-55182-to-known-exploited-vulnerabilities-catalog/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA adds CVE-2025-55182 to known exploited vulnerabilities catalog",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/12/05/cisa-adds-one-known-exploited-vulnerability-catalog"
      },
      "url": "https://decisioninsights.ai/cisa-adds-cve-2025-55182-to-known-exploited-vulnerabilities-catalog/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-adds-openplc-scadabr-vulnerability-to-kev-catalog/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA adds OpenPLC ScadaBR vulnerability to KEV catalog",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/12/03/cisa-adds-one-known-exploited-vulnerability-catalog"
      },
      "url": "https://decisioninsights.ai/cisa-adds-openplc-scadabr-vulnerability-to-kev-catalog/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-adds-android-framework-vulnerabilities-to-kev-catalog/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA adds Android Framework vulnerabilities to KEV catalog",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/12/02/cisa-adds-two-known-exploited-vulnerabilities-catalog"
      },
      "url": "https://decisioninsights.ai/cisa-adds-android-framework-vulnerabilities-to-kev-catalog/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-adds-two-android-framework-cves-to-kev-catalog/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA adds two Android framework CVEs to KEV catalog",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/12/02/cisa-adds-two-known-exploited-vulnerabilities-catalog"
      },
      "url": "https://decisioninsights.ai/cisa-adds-two-android-framework-cves-to-kev-catalog/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-adds-samsung-mobile-device-vulnerability-cve-2025-21042-to-kev-catalog/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA adds Samsung mobile device vulnerability CVE-2025-21042 to KEV catalog",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/11/10/cisa-adds-one-known-exploited-vulnerability-catalog"
      },
      "url": "https://decisioninsights.ai/cisa-adds-samsung-mobile-device-vulnerability-cve-2025-21042-to-kev-catalog/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-adds-one-known-exploited-vulnerability-to-catalog-9/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA adds one known exploited vulnerability to catalog",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/11/21/cisa-adds-one-known-exploited-vulnerability-catalog"
      },
      "url": "https://decisioninsights.ai/cisa-adds-one-known-exploited-vulnerability-to-catalog-9/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-adds-known-exploited-vulnerability-to-catalog/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA adds known exploited vulnerability to catalog",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/11/28/cisa-adds-one-known-exploited-vulnerability-catalog"
      },
      "url": "https://decisioninsights.ai/cisa-adds-known-exploited-vulnerability-to-catalog/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-issues-update-to-known-exploited-vulnerabilities-catalog-including-fortinet-flaw/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA issues update to Known Exploited Vulnerabilities Catalog including Fortinet flaw",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/11/14/cisa-adds-one-known-exploited-vulnerability-catalog"
      },
      "url": "https://decisioninsights.ai/cisa-issues-update-to-known-exploited-vulnerabilities-catalog-including-fortinet-flaw/"
    },
    {
      "@id": "https://decisioninsights.ai/cisa-adds-vulnerability-cve-2025-13223-to-known-exploited-vulnerabilities-catalog/#blogposting",
      "@type": "BlogPosting",
      "headline": "CISA adds vulnerability CVE-2025-13223 to Known Exploited Vulnerabilities Catalog",
      "isBasedOn": {
        "@type": "CreativeWork",
        "author": {
          "@type": "Person",
          "name": "CISA"
        },
        "sourceOrganization": {
          "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
          "@type": "Organization",
          "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
          "name": "Department of Homeland Security"
        },
        "url": "https://www.cisa.gov/news-events/alerts/2025/11/19/cisa-adds-one-known-exploited-vulnerability-catalog"
      },
      "url": "https://decisioninsights.ai/cisa-adds-vulnerability-cve-2025-13223-to-known-exploited-vulnerabilities-catalog/"
    }
  ],
  "termCode": "BOD",
  "url": "https://decisioninsights.ai/term/binding-operational-directive-bod/"
}

CollectionPage

{
  "@context": "https://schema.org",
  "@id": "https://decisioninsights.ai/term/binding-operational-directive-bod/",
  "@type": "CollectionPage",
  "dateModified": "2026-08-24T01:19:16Z",
  "description": "Binding Operational Directive is a mandatory cyber risk management order that the U.S. Cybersecurity and Infrastructure Security Agency issues to federal civilian executive branch agencies, requiring specific security actions, deadlines, and reporting to address defined vulnerabilities and strengthen the security of federal information systems.",
  "isPartOf": {
    "@id": "https://decisioninsights.ai/#website"
  },
  "mainEntity": {
    "@id": "https://decisioninsights.ai/term/binding-operational-directive-bod/#definedterm"
  },
  "name": "Binding Operational Directive",
  "sdDatePublished": "2026-08-24",
  "sdPublisher": {
    "@id": "https://decisioninsights.ai/#organization"
  },
  "url": "https://decisioninsights.ai/term/binding-operational-directive-bod/"
}

What we add

Graph

A glossary entry defines a term and stops there. It doesn't show where the term is actually being used or written about. We track and link every article that covers it.

BlogPosting CISA adds GeoServer XXE to KEV catalog BlogPosting CISA adds CVE-2025-6218 and CVE-2025-62221 to KEV catalog BlogPosting CISA updates KEV catalog with two vulnerabilities and 9 more on this page

Counted facts

A dictionary definition doesn't say how often a term is actually used. This counts it across the graph -- articles that mention it, open source projects tagged with it, and the organizations tagged with it, listed here alongside the count. A term has no peer companies, and nothing here claims otherwise.

Articles mentioning this entity 116 Related terms Related terms (co-occurring topics)

The person who sent this agent gets an answer they can act on

Somebody dispatched this agent to evaluate Binding Operational Directive for a real decision: a shortlist, a vendor comparison, a purchase. "Binding Operational Directive makes X" isn't something they can act on; they need to know the claim is real and where it came from. Follow one enriched link from Act 2 and see what the agent can actually hand back to them:

The record DefinedTerm Binding Operational Directive
One of its 12 linked records BlogPosting CISA adds GeoServer XXE to KEV catalog https://decisioninsights.ai/cisa-adds-geoserver-xxe-to-kev-catalog/
The primary source CreativeWork cisa.gov https://www.cisa.gov/news-events/alerts/2025/12/11/cisa-adds-one-known-exploited-vulnerability-catalog Original author: CISA

Our summary is written by Decision Insights Threat Desk. The source keeps its own byline, credited above. Both are in the JSON.