Bod-26-04

CISA Kills the Flat KEV Deadline: BOD 26-04 Starts a Three-Day Patch Clock

BOD 26-04 revokes BOD 22-01 and 19-02, replacing flat KEV due dates with risk-tiered deadlines: three days plus mandatory forensic triage for internet-facing, automatable, total-control flaws.