That's because the EO (apparently) concerns itself with the operations of systems within the federal government. Government intervention into privately operated systems requires congressional action.
The federal government is collectively the largest IT operator in the world, so there's a huge amount of work to be done and policy to be created just in setting governance standards for their own systems, which is what the administration is doing here.
The federal government is collectively the largest IT operator in the world, so there's a huge amount of work to be done and policy to be created just in setting governance standards for their own systems, which is what the administration is doing here.