CISA Partners with OMB to Stand Up Vulnerability Disclosure Policies at Civilian Agencies

The Cybersecurity and Infrastructure Security Agency and the Office of Management and Budget will require civilian agencies to develop vulnerability disclosure policies, allowing outside experts who have “seen something” that looks like a cyber weakness to “say something” to those who can fix it.