Skip to main content

Search Results: keywords:"vulnerability disclosure policy"

  • S. 5028 requires federal contractors to establish a vulnerability disclosure policy in line with guidelines from the National Institute of Standards and Technology (NIST). The bill mandates updates to the Federal Acquisition Regulation to include requirements for contractors...

    Simple Explanation

    Federal contractors have to follow special rules to find and fix problems in their computer systems, just like following instructions in a guidebook. If it's important for protecting the country or for special projects, some rules can be skipped, but they have to explain why.

  • S. 5028 requires federal contractors to have a vulnerability disclosure policy that aligns with guidelines from the National Institute of Standards and Technology (NIST). The bill mandates updates to the Federal Acquisition Regulation to ensure these contractors address potential security...

    Simple Explanation

    The bill says that companies working with the government have to have a plan for finding and fixing computer problems, following certain rules, but sometimes they can skip these rules if it’s super important for safety or research.