DHS Plans To Formalize Bug Disclosure Policy

NextGov: The Homeland Security Department plans to formalize a method for ethical hackers to share with the department hackable vulnerabilities they find in its public-facing websites and other internet tools, Secretary Kirstjen Nielsen told lawmakers Thursday.

That would bring Homeland Security up to speed with the Defense Department and the General Services Administration’s tech transformation wing, which already have vulnerability disclosure policies.

The progress is too slow, however, for Rep. Jim Langevin, D-R.I., who pressed Nielsen about the issue during a budget hearing before the Homeland Security Committee.

Read article

Share