S. 5028 requires federal contractors to establish a vulnerability disclosure policy in line with guidelines from the National Institute of Standards and Technology (NIST). The bill mandates updates to the Federal Acquisition Regulation to include requirements for contractors...
Simple Explanation
Federal contractors have to follow special rules to find and fix problems in their computer systems, just like following instructions in a guidebook. If it's important for protecting the country or for special projects, some rules can be skipped, but they have to explain why.