NIST: Vulnerability Disclosure as a Requirement for Every Organization

NIST's revised cybersecurity framework draft adds vulnerability disclosure processes as a core requirement, following input from Rapid7, Duo, Cisco, Symantec and Bugcrowd.