2024 Budget Planning: Preparing For U.S. Mandates to Implement Vulnerability Disclosure Policies (VDPs)

This article discusses the growing U.S. policy and regulatory focus on Vulnerability Disclosure Policies (VDPs), noting recent government guidance, legislation proposals, and agency rules that increasingly require or encourage organizations and federal contractors to implement VDPs. It advises organizations to budget for VDP implementation as an investment in cyber resilience and to engage with the security research community, and points readers to HackerOne for further assistance.