Why Every Federal Agency Needs a VDP

This article endorses CISA's draft directive that would require every federal civilian agency to publish a vulnerability disclosure policy (VDP), praises the Department of Defense’s successful VDP as a model, and urges broader adoption to leverage ethical hackers for improving government cybersecurity ahead of upcoming national events such as the census and elections.