CISA has mandated Windows PCs be updated by October 7, which is three weeks from now. As ever, the formal mandate applies to federal employees, but many other public and private organizations follow CISA’s mandates, given its remit “to help every organization better manage vulnerabilities and keep pace with threat activity.”