NIST SP 800-53 R5 adds Vulnerability Disclosure Programs to Federal Security and Privacy Controls
bugcrowd.com | vulnerability | #compliance | #vdp | #vulnerability-disclosure | #policy | #nist | #federal-security | #cvd | #sp-800-53 | #security-policy | #federal-compliance
Summary
NIST's SP 800-53 Rev. 5 adds Vulnerability Disclosure Programs as a recommended control (RA-5(11)), requiring public reporting channels and explicit good-faith research authorization.
- Published
- Collected
--- id: 967 title: "NIST SP 800-53 R5 adds Vulnerability Disclosure Programs to Federal Security and Privacy Controls" source_domain: bugcrowd.com source_url: "https://www.bugcrowd.com/blog/nist-sp-800-53-r5-adds-vulnerability-disclosure-programs-to-federal-security-and-privacy-controls/" published_at: "2020-10-07T00:00:00Z" tags: ["compliance", "vdp", "vulnerability-disclosure", "policy", "nist", "federal-security", "cvd", "sp-800-53", "security-policy", "federal-compliance"] phying_url: "https://phying.com/item/967" lang: en --- # NIST SP 800-53 R5 adds Vulnerability Disclosure Programs to Federal Security and Privacy Controls ## Summary NIST's SP 800-53 Rev. 5 adds Vulnerability Disclosure Programs as a recommended control (RA-5(11)), requiring public reporting channels and explicit good-faith research authorization. ## Intelligence Metadata - **Sources:** bugcrowd.com - **Published:** 2020-10-07T00:00:00Z - **Original:** https://www.bugcrowd.com/blog/nist-sp-800-53-r5-adds-vulnerability-disclosure-programs-to-federal-security-and-privacy-controls/ - **Phying News:** https://phying.com/item/967