DHS Mandates Federal Agencies to Run Vulnerability Disclosure Policy

Schneier on Security 2019-11-28

The DHS is requiring all federal agencies to develop a vulnerability disclosure policy. The goal is that people who discover vulnerabilities in government systems have a mechanism for reporting them to someone who might actually do something about it.

The devil is in the details, of course, but this is a welcome development.

The DHS is seeking public feedback.