Technology and cybersecurity

Executive Order 14144: Strengthening and Promoting Innovation in the Nation's Cybersecurity

President: Joseph R. Biden Jr.

Directed secure software practices, cloud identity controls, internet-routing security, post-quantum planning, digital identity pilots and AI-enabled cyber defense.

Status: In effect. Is Executive Order 14144 still in effect? Yes. Executive Order 14144 remains in effect. See Executive Order 14306: Sustaining Select Efforts To Strengthen the Nation's Cybersecurity and Amending Executive Order 13694 and Executive Order 14144, Federal Register record.

What does Executive Order 14144 do?

NIST and CISA had staged guidance tasks, while OMB and agencies addressed identity and software controls and the acquisition council considered procurement rules.

Administration position: The order’s findings and policy rationale were the Biden administration’s positions. This guide distinguishes them from implementation records and judicial rulings.
SignedJanuary 16, 2025
Lead officialsOMB, NIST, CISA, Defense, Commerce and intelligence agencies
Express timingStaged deadlines from 30 days to several years

Before and after

Before the order

EO 14028 and agency standards advanced zero trust and software security, but significant federal and critical-infrastructure vulnerabilities persisted.

After the order

Agencies began implementation. EO 14306 removed several provisions, rewrote the policy and deadlines, narrowed cyber-sanctions language and retained selected software, post-quantum, AI and IoT-security efforts.

Who had to do what

Agency / officeActionTiming / position
NIST and CISAPublish security standards and implementation guidanceStaged 2025–26 deadlines
OMB and agenciesModernize federal controls and identity practicesStaged deadlines
FAR CouncilConsider procurement requirementsWithin one year

What happened next

EO 14144 signed.

EO 14306 substantially amended the order.