Exactly what the KEV Catalog Is, And the way to Actually Use It In November 2021, CISA issued Binding Operational Directive 22-01. Its material was easy: US federal civilian organizations will have to remediate sure vulnerabilities by mounted deadlines, plus the listing of which