The Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency has released a draft version of a directive that would require federal agencies to establish vulnerability disclosure policies. The draft Binding Operational Directive 20-01 has been designed to address an environment that delays or discourages the public from reporting potential information security problems to the government, preventing the issues being discovered and fixed.

Read full article on SiliconANGLE