Regulacje i polityka gospodarcza · 19.12.2019

Cybersecurity and Infrastructure Security Agency; Availability of Draft Binding Operational Directive 20-01

Through this notice, CISA is making available a draft binding operational directive that will apply to all Federal, executive branch departments and agencies relating to vulnerability disclosure policies. The draft binding operational directive proposes requiring agencies to develop and publish a vulnerability disclosure policy (VDP) and maintain supporting handling procedures. This notice also requests comment on the draft binding operational directive.