
Eric Geller @ericgeller
By the way, that first BOD that CISA issued in 2015? It covered "critical vulnerability mitigation." Agencies had to fix all critical flaws on their internet-facing systems within 30 days of a weekly report IDing them. Did they comply? I don't know. But we're back there again. — PolitiTweet.org