This order directs a wide set of cybersecurity actions for federal agencies, especially civilian agencies, and in some cases also for defense, intelligence, and national security systems. It covers software supply chains, cloud services, identity and access management, internet routing, encrypted co