Proposed Bill Would Mandate Federal Contractor VDPs

A newly proposed bill would require third-party contractors that work with federal agencies to set up vulnerability disclosure policies (VDPs).

The Federal Cybersecurity Vulnerability Reduction Act, introduced on Tuesday by Rep. Nancy Mace (R-S.C.), would mandate contractors to implement programs that would give vulnerability reporters clear rules for submitting bugs found in their systems, consistent with guidelines from the National Institute of Standards and Technologies (NIST) on disclosing federal vulnerabilities.

Federal contractors, which have access to valuable government data and …

act bill bugs clear contractor contractors cybersecurity disclosure federal federal agencies federal contractor federal cybersecurity found party policies rules third third-party tuesday vulnerability vulnerability disclosure work