
The Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday issued its final directive requiring federal civilian agencies to develop and publish a vulnerability disclosure policy (VDP) for their Internet-accessible systems and services, which will make it easier for the public to report flaws found on government websites. “Cyber security is strongest when the public is given the ability to contribute, and a key component to receiving cyber security help from the public is to establish a formal policy that describes…