Brought to you by Southworth PC—Attorneys for Federal Employees

Our online community now tops 150,000 federal workers and supporters across TikTok, Instagram, YouTube, Facebook, and LinkedIn. Each briefing distills the day’s most consequential developments, adds clear-eyed legal analysis, and pairs it with mindfulness tools that keep you steady no matter how turbulent the news cycle becomes. If this newsletter helps you stay informed, please pass it on: https://fedlegalhelp.com/newsletter. Your advocacy broadens the protective circle for every federal employee.

Top Three News Stories:

1. OMB Tells Agencies to Prepare RIF Plans If a Shutdown Hits

The White House Office of Management and Budget directed agencies to be ready to issue reduction-in-force (RIF) notices if there’s a lapse in appropriations next week, while also instructing agencies to keep planning for post-shutdown RIFs aimed at retaining only the “minimal” staff needed for statutory functions. OMB said RIF preparations should proceed alongside standard furlough planning, though it told agencies to drop the RIFs if a shutdown is averted. Lawmakers criticized the move and questioned its legality and feasibility on the tight timeline. For federal employees, this means you could receive a RIF notice (separate from, and more permanent than, a furlough) and should verify your records that affect retention standing (service, veterans’ preference, performance) and watch for agency instructions. Government Executive

Legal Insight:

A RIF must follow OPM’s rules at 5 C.F.R. part 351, including defining competitive areas/levels and ranking employees by tenure, veterans’ preference, length of service and performance; written notice is required, and many employees have bump/retreat rights. Check your SF-50s and performance ratings for accuracy now, and learn about CTAP/ICTAP priority, grade/pay retention and possible severance or discontinued service retirement. If you receive a RIF notice or believe your retention data is wrong, you generally have 30 days to appeal eligible actions to MSPB—talk to counsel or your union promptly. Review OPM’s RIF overview to understand timelines and options.

2. CISA Issues Emergency Directive: Patch Cisco ASA Zero-Days by Sept. 26 and Report by Oct. 2

CISA’s Emergency Directive 25-03 orders civilian agencies to identify affected Cisco ASA/Firepower devices, collect forensics, disconnect end-of-support hardware, and apply updates by 11:59 p.m. EDT on Friday, Sept. 26, with an enterprise inventory and status report due by Oct. 2. CISA ties the activity to the “ArcaneDoor” campaign and flags two CVEs that present unacceptable risk. Officials said the directive is limited to civilian agencies but urged others to follow suit. For federal employees, this may mean IT teams working urgent after-hours maintenance and possible short-term network disruptions; follow agency communications and timekeeping rules. Federal News Network

Legal Insight: 

Under FISMA, CISA can issue binding emergency directives to civilian agencies (44 U.S.C. § 3553(h), § 3554), so compliance and deadlines are mandatory. If you administer affected systems, document actions taken and retain records of scans, patches and inventories; if you’re not in IT, do not alter devices or settings outside approved steps. Telework or access issues stemming from required changes should be reported through normal channels; if you’re directed to perform unscheduled work, use established overtime/comp-time procedures. Seek counsel or union help if you’re asked to bypass security policy or perform duties beyond your authorization.

3. Senate Report: DOGE’s Data Practices Risk Privacy and Security Across Agencies

A report from Senate Homeland Security & Governmental Affairs Committee Democrats alleges the Department of Government Efficiency (DOGE) embedded staff with broad access to agency systems and uploaded sensitive datasets—such as Social Security data—to cloud environments without proper safeguards or oversight. The report warns of “serious cybersecurity vulnerabilities” and potential Privacy Act violations, and urges curbs on DOGE access. Agencies disputed some claims, but the committee cited whistleblower accounts and site visits at SSA, GSA and OPM. For federal employees, this means you should treat atypical requests to share bulk data with extra caution, follow your agency’s privacy and security policies, and escalate concerns to your privacy officer, CIO, IG, or OSC. Government Executive

Legal Insight:  

Employees handling PII must follow the Privacy Act, OMB Circular A-130, and agency policies; do not transfer live production data to new systems without approvals, documented safeguards, and data minimization. If you’re pressured to bypass controls, ask for written instructions, preserve records, and consider a protected disclosure to your OIG or the U.S. Office of Special Counsel. Training and need-to-know limits still apply to embedded or cross-agency teams. Seek counsel if you believe you’re being directed to violate law or policy or if you fear retaliation.

Mindful Moment of the Day: 

End-of-Day “Mental Shelf” Visualization 

Five minutes before sign-off, imagine placing each active matter into a labeled mental shelf. Close the cabinet with a slow, intentional exhale. This visualization tells your default-mode network that these loops are closed for now. Without that closure, the brain tends to rehearse and rehash after hours, robbing you of rest.