# CISA Offers No-Cost Federal SIEM Service

OMB Memorandum M-26-14 requires federal agencies to submit logging plans by **November 18, 2026** and keep security logs searchable for at least six months and retrievable for at least one year. CISA offers federal civilian agencies a no-cost SIEM-as-a-Service (SIEMaaS) platform and logging reference architecture to support monitoring and investigation. Agencies remain responsible for log-source coverage, alert operations, threat hunting, and maturity reporting; the signals identify no solicitation or contract award.

- Agencies have eight days from November 10 to submit their logging plans. The six-month searchability and one-year retrieval periods are mandatory agency requirements.
- Contractors may find work supporting SIEMaaS integration, network-data management, alert tuning, and operational readiness. These services could complement CISA’s shared platform while reducing demand for agencies to build their own SIEM infrastructure.
- Companies should distinguish support services from the agency obligations: adopting SIEMaaS does not transfer responsibility for logging coverage or security operations from the agency.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Regulatory Compliance
**Published:** November 10, 2026

### Government Entities
- Cybersecurity and Infrastructure Security Agency (CISA)
- Office of Management and Budget (OMB)

### Sources
- [Shared cyber services turn recent OMB memo into cyber advantage | FedScoop](https://fedscoop.com/agency-logging-omb-memo-deadline) - FedScoop
- [Federal agencies leverage shared services to meet new logging criteria | brief | MSSP Alert](https://www.msspalert.com/brief/federal-agencies-leverage-shared-services-to-meet-new-logging-requirements) - MSSP Alert