EAD Chris Butera Explains BOD 26‑04: Why Risk‑Based Patching Matters Now
Plays from YouTube in privacy-enhanced mode — nothing loads from YouTube until you press play.
Join Chris Butera, CISA’s Executive Assistant Director for Cybersecurity, as they break down Binding Operational Directive 26‑04: Prioritizing Security Updates Based on Risk — CISA’s latest update to modernize vulnerability management across the federal enterprise. In this video, Butera, Chris explains how BOD 26‑04 directs agencies to prioritize patching the highest‑risk vulnerabilities first, including those exposed to the public internet, actively exploited, automated at scale, or carrying significant technical impact.
Description from CISA.