---
id: 2953
title: "Vulnerability Disclosure is Now Mandatory for Federal Agencies - Here's How to Make it Happen"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/vulnerability-disclosure-now-mandatory-federal-agencies-heres-how-make-it-happen"
published_at: "2020-09-17T18:00:00Z"
tags: ["cisa", "compliance", "vdp", "vulnerability-disclosure", "government", "policy", "federal-agencies"]
phying_url: "https://phying.com/item/2953"
lang: en
---

# Vulnerability Disclosure is Now Mandatory for Federal Agencies - Here's How to Make it Happen

## Summary

CISA's Binding Operational Directive 20-01 requires federal civilian agencies to publish vulnerability disclosure policies for internet-accessible systems by March 2021, with steps to comply.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2020-09-17T18:00:00Z
- **Original:** https://www.hackerone.com/blog/vulnerability-disclosure-now-mandatory-federal-agencies-heres-how-make-it-happen
- **Phying News:** https://phying.com/item/2953