# A binding US directive requires federal agencies to run automated asset discovery every 7 days and recurring scans, including on routers, switches and firewalls

Page: https://flyvolo.ai/en/changes/ev-20221003-network-engineer-10
Date: 2022-10-03 · Stage: Policy mandate
Can this record move a task judgement? only together with another independent record
Occupation: https://flyvolo.ai/en/careers/network-engineer

## Scope

United States, federal civilian agencies. The directive says that by 3 April 2023 agencies are required to perform automated asset discovery every 7 days covering their whole IPv4 space, to initiate vulnerability enumeration across all discovered assets every 14 days, and that enumeration on managed network devices such as routers, switches and firewalls must use privileged credentials. It requires automated discovery and scanning, not automated patching or configuration; nothing on administrators' time.

## Source

- Cybersecurity and Infrastructure Security Agency — Binding Operational Directive 23-01 'Improving Asset Visibility and Vulnerability Detection on Federal Networks' (3 October 2022; compliance by 3 April 2023) — https://www.cisa.gov/news-events/directives/bod-23-01-improving-asset-visibility-and-vulnerability-detection-federal-networks (primary source)

## What this means

In US federal networks, keeping track of devices and their missing patches is required to be automated.

## What it does not show yet

A mandate in one government; it does not require automated patching and does not show what changed for network staff.

## How to verify it yourself

Open BOD 23-01 on CISA's site and find "Perform automated asset discovery every 7 days".


More: https://flyvolo.ai/llms.txt