DHS Issues Draft Order to Require Vulnerability Disclosure Policies at Civilian Agencies

DHS's Cybersecurity and Infrastructure Security Agency has issued a draft Binding Operational Directive that compels civilian agencies to establish programs to work with outside security researchers to find and fix software flaws in agency websites and applications.