NIST Overhauls “Security and Privacy Controls” and Emphasizes VDP as a Best Practice

NIST SP 800-53 Revision 5 and SP 800-53B update organizational security guidance by recommending public vulnerability disclosure programs (VDPs) and bug bounty initiatives, modernizing controls for supply-chain risk, and providing customizable baselines to help public and private organizations identify and remediate vulnerabilities more effectively.