OMB Rolled Back the Rules. Security Did Not Get Easier

The U.S. Office of Management and Budget (OMB)’s decision to rescind M-22-18 and M-23-16 and replace them with M-26-05 has been framed as a win for flexibility and a rollback of security theater. That framing is not entirely wrong, but it misses something fundamental about how modern software actually fails. There are pieces of this shift that are directionally correct, and others that risk undoing what little consistency the federal software ecosystem had finally begun to build.

First seen on securityboulevard.com

Jump to article: securityboulevard.com/2026/03/omb-rolled-back-the-rules-security-did-not-get-easier/