CISA Announces New Vulnerability Disclosure Policy (VDP) Platform for Federal Agencies

guest · Jul 30, 2021

CISA launches vulnerability disclosure platform for federal agencies
July 30, 2021
https://www.bleepingcomputer.com/ne...ity-disclosure-platform-for-federal-agencies/

The Cybersecurity and Infrastructure Security Agency (CISA) today launched a new vulnerability disclosure policy (VDP) platform for US federal civilian agencies.

Initially announced in June, the federal civilian enterprise-wide crowdsourced VDP platform provided by BugCrowd and EnDyna was established in support of Binding Operational Directive (BOD) 20-01 issued in September 2020.
Click to expand...

The newly launched VDP platform service allows Federal Civilian Executive Branch (FCEB) agencies to identify, monitor, and close security gaps in critical systems with the help of ethical hackers worldwide.

"Through this crowdsourcing platform, Federal Civilian Executive Branch (FCEB) agencies will now be able to coordinate with the security research community in a streamlined fashion and those reporting incidents enjoy a single, usable website to facilitate submission of findings," explained Eric Goldstein, CISA’s Executive Assistant Director for Cybersecurity.
Click to expand...

At first, BugCrowd and EnDyna will be the ones assessing vulnerability reports submitted through the shared FCEB VDP to free up the agencies' time and resources, allowing them to focus on bug reports related to critical systems with real impact.

"This new platform allows agencies to gain greater insights into potential vulnerabilities, which will improve their cybersecurity posture," CISA added.
"This approach also means agencies no longer need to develop separate systems to enable vulnerability reporting and triage of identified vulnerabilities, providing government-wide cost savings that CISA estimates at over $10 million."
Click to expand...

Log in or Sign up

CISA Announces New Vulnerability Disclosure Policy (VDP) Platform for Federal Agencies

guest Guest

Log in or Sign up

CISA Announces New Vulnerability Disclosure Policy (VDP) Platform for Federal Agencies

guest Guest

Useful Searches