CISA’s Manfra: First-ever public comment process, on vulnerability disclosure, expected in coming months

CISA is planning an unprecedented public comment process, to be rolled out in coming months, for the consistent implementation of vulnerability disclosure policies and programs across the federal enterprise, according to a top CISA official.

“Over the next couple of months, you will see some things from OMB and us focused specifically on vulnerability disclosure programs and having those policies in place,” Cybersecurity and Infrastructure Security Agency Assistant Director Jeanette Manfra said. “We're going to do something pretty unusual for...