---
id: 967
title: "NIST SP 800-53 R5 adds Vulnerability Disclosure Programs to Federal Security and Privacy Controls"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/nist-sp-800-53-r5-adds-vulnerability-disclosure-programs-to-federal-security-and-privacy-controls/"
published_at: "2020-10-07T00:00:00Z"
tags: ["compliance", "vdp", "vulnerability-disclosure", "policy", "nist", "federal-security", "cvd", "sp-800-53", "security-policy", "federal-compliance"]
phying_url: "https://phying.com/item/967"
lang: en
---

# NIST SP 800-53 R5 adds Vulnerability Disclosure Programs to Federal Security and Privacy Controls

## Summary

NIST's SP 800-53 Rev. 5 adds Vulnerability Disclosure Programs as a recommended control (RA-5(11)), requiring public reporting channels and explicit good-faith research authorization.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2020-10-07T00:00:00Z
- **Original:** https://www.bugcrowd.com/blog/nist-sp-800-53-r5-adds-vulnerability-disclosure-programs-to-federal-security-and-privacy-controls/
- **Phying News:** https://phying.com/item/967