NTSB Last Civilian Agency without Vulnerability Disclosure Policy

The National Transportation Safety Board is the only federal civilian agency—out of 101—that has not developed and implemented a vulnerability disclosure policy as required by a binding operational directive issued by the Cybersecurity and Infrastructure Security Agency two years ago.