# CISA's Logging Reference Architecture for OMB M-26-14: What federal agencies should do next

DevFeed: [CISA's Logging Reference Architecture for OMB M-26-14: What federal agencies should do next](<https://devfeed.tech/articles/cisa-s-logging-reference-architecture-for-omb-m-26-14-what-federal-agencies-should-do-next-30890.md>)

Original publisher: [Read original article](<https://www.elastic.co/blog/cisa-logging-omb-m-26-14>)

Author: Woody Walton

Published: 2026-09-16T00:00:00Z

Content type: article

Language: en

Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack](<https://devfeed.tech/sources/elastic-blog-elasticsearch-kibana-and-elk-stack.md>)

Topics: [cisa](<https://devfeed.tech/topics/cisa.md>), [Logging](<https://devfeed.tech/topics/logging.md>), [cybersecurity and infrastructure security agency](<https://devfeed.tech/topics/cybersecurity-and-infrastructure-security-agency.md>), [log management](<https://devfeed.tech/topics/log-management.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [implementation](<https://devfeed.tech/topics/implementation.md>), [audit](<https://devfeed.tech/topics/audit.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [architecture](<https://devfeed.tech/tags/architecture.md>), [audit](<https://devfeed.tech/tags/audit.md>), [cisa](<https://devfeed.tech/tags/cisa.md>), [cybersecurity-and-infrastructure-security-agency](<https://devfeed.tech/tags/cybersecurity-and-infrastructure-security-agency.md>), [cybersecurity-open-source-standards-log-management-government](<https://devfeed.tech/tags/cybersecurity-open-source-standards-log-management-government.md>), [government](<https://devfeed.tech/tags/government.md>), [implementation](<https://devfeed.tech/tags/implementation.md>), [logging](<https://devfeed.tech/tags/logging.md>), [logs](<https://devfeed.tech/tags/logs.md>), [public-sector](<https://devfeed.tech/tags/public-sector.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

This Elastic blog explains CISA's Logging Reference Architecture for OMB M-26-14 and the actions federal civilian executive branch agencies must take. It highlights planning and maturity deadlines, recommends assessing existing capabilities and documenting gaps, and discusses storage tiers, retrieval, immutability, and audit requirements.

## Source excerpt

Now that CISA has released its Logging Reference Architecture (LRA) for OMB M-26-14, federal agencies tasked to complete their logging plans. In this blog, we walk you through the most important aspects of the LRA guidance.