DHS questions vulnerability disclosure program

guest · Aug 29, 2019

DHS questions vulnerability disclosure program
August 28, 2019
https://www.fedscoop.com/dhs-vulnerability-disclosure-program/

The Department of Homeland Security plans to collect information on security vulnerabilities in its information systems and wants to know if its methods are sound.

Section 101 of the Strengthening and Enhancing Cyber-capabilities by Utilizing Risk Exposure (SECURE) Technology Act requires DHS to establish a Vulnerability Disclosure Program. Undiscovered vulnerabilities could be exploited by nation-states or hackers to steal personally identifiable information or manipulate data.
Zero-day vulnerabilities, those unknown to DHS, are of particular concern.

DHS anticipated about 3,000 responses each taking three hours to ingest for a 9,000-hour burden. The agency wants to know if potential program participants think collection is even necessary, the estimated burden is accurate, the information sought can be expanded, and automated or electronic submission is needed.
Click to expand...

Log in or Sign up

DHS questions vulnerability disclosure program

guest Guest

Log in or Sign up

DHS questions vulnerability disclosure program

guest Guest

Useful Searches