Sens. Warner, Lankford release discussion draft bill to update vulnerability disclosure requirements for contractors

Senate Intelligence Chairman Mark Warner (D-VA) and Sen. James Lankford (R-OK) have released a discussion draft of an upcoming bill to amend the Federal Acquisition Regulation to ensure federal contractors have vulnerability disclosure policies in place.

“Vulnerability disclosure policies (VDPs) provide a way for organizations to receive unsolicited reports of vulnerabilities so that they can be patched. Publicly defining how they will accept, assess, and manage vulnerability disclosure reports through the establishment of these policies enables and encourages good faith...