What is the current Executive Order for Information Security?

The current Executive Order for Information Security is Executive Order 14028. This Executive Order, signed in May 2021, focuses on improving the nation’s cybersecurity and strengthening resilience against cyber threats. It emphasizes the need for federal agencies to adopt secure software development practices, enhance threat detection capabilities, and improve information security standards to safeguard sensitive data.

It builds upon previous orders and establishes a comprehensive approach to cybersecurity that responds to the 21st-century challenges posed by digital threats. This includes increasing the transparency and accountability of federal government cybersecurity practices and enhancing collaboration with the private sector to achieve better security outcomes.

While Executive Order 13526 relates to the classification of national security information, and Executive Orders 12333 and 13467 pertain to intelligence and personnel security respectively, they do not directly address the overarching strategies for protecting information security as mandated in more recent directives like Executive Order 14028. Therefore, given its scope and focus, Executive Order 14028 represents the current framework guiding information security practices.