Bill requiring federal contractors to have vulnerability disclosure policies gets House redo

Bipartisan legislation—the Federal Contractor Cybersecurity Vulnerability Reduction Act—was reintroduced to require federal contractors to institute vulnerability disclosure policies and prompt OMB and DoD updates to acquisition rules. Sponsors and industry supporters argue the requirement would close a security gap highlighted by the 2015 OPM breach and help protect sensitive government data by ensuring contractors follow similar vulnerability-handling standards as federal agencies.