Strengthening and Promoting Innovation in the Nation's Cybersecurity

Executive Order 14144, titled Strengthening and Promoting Innovation in the Nation's Cybersecurity, directs a broad set of actions across the federal government to harden the United States’ digital defenses, modernize how software and communications are secured, and accelerate the adoption of emerging security technologies. Building on prior orders and the National Cybersecurity Strategy, the EO focuses on three core areas: (1) securing software supply chains and software development practices (including third-party risk management and attestations), (2) strengthening the security of federal systems, communications, and identity management, and (3) advancing zero-trust-style protections, modern cryptography (including post-quantum readiness), and cyber threat awareness across government and critical infrastructure. It also expands cybersecurity activities related to space systems, open-source software, and digital identity for public benefits, while creating and guiding a coordinated federal structure to implement these changes (involving OMB, CISA, NIST, FAR Council, GSA, and the National Cyber Director, among others). The order sets specific timelines and processes for implementing secure software development attestations, updating risk management frameworks, enhancing threat hunting capabilities, modernizing identity and access management (including phishing-resistant authentication), encrypting communications (DNS, email, etc.), improving routing security, and pursuing quantum-safe cryptography. It directs agencies to adopt industry best practices, increase transparency in software supply chains, and incentivize cloud security improvements through FedRAMP and related measures. It also envisions international engagement on cryptography standards and requires attention to sensitive data access and privacy protections when enabling government-wide threat hunting and data sharing.