Center for Federal Accountability
Vulnerability disclosure policy published, scoped to all domains, with a registered security contact
KAI-EXP-VDP · Draft, under analyst review
Authority
Evidence
- P1: Observed: what anyone can see from the internet with ordinary requests
- P2: Published government data sets
Sources: P1, P2 .gov list.
How it is checked
machine and analyst, 30 days.
FedRAMP Key Security Indicators: KSI-PIY-RVD.
Agency results
No agency has been graded on this requirement yet.