---
id: 1475
title: "Are You Ready for the New NIST Control Around Public Disclosure Programs?"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/are-you-ready-new-nist-control-around-public-disclosure-programs"
published_at: "2024-07-25 16:00"
tags: ["compliance", "vdp", "vulnerability-disclosure", "policy", "fedramp", "saas", "nist"]
phying_url: "https://phying.com/item/1475"
lang: en
---

# Are You Ready for the New NIST Control Around Public Disclosure Programs?

## Summary

NIST 800-53 Rev 5 adds control RA-5(11), requiring SaaS vendors to run a publicly discoverable vulnerability reporting channel. The article outlines VDP options and FedRAMP compliance implications.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2024-07-25 16:00
- **Original:** https://www.hackerone.com/blog/are-you-ready-new-nist-control-around-public-disclosure-programs
- **Phying News:** https://phying.com/item/1475