Home / News / GSA Issues Vulnerability Disclosure Rule for Technology Transformation Service-Run Systems

GSA Issues Vulnerability Disclosure Rule for Technology Transformation Service-Run Systems

cyberThe General Services Administration’s technology transformation service organization has released a new policy that seeks to help security researchers report cyber vulnerabilities in TTS-run systems.

TTS issued the vulnerability disclosure policy in an effort to assure security researchers that GSA will not initiate legal action under the Computer Fraud and Abuse Act for research efforts that are considered “authorized,” according to a blog post published Nov. 22 on 18F website.

The policy covers five TTS-operated systems that include vote.gov, analytics.usa.gov, calc.gsa.gov, micropurchase.18f.gov and 18f.gsa.gov.

GSA’s TTS wants security researchers to avoid privacy violations and disruption to production systems as well as keep the use of exploits “to the extent necessary to confirm a vulnerability.”

Security researchers should maintain the confidentiality of identified vulnerabilities 90 days after submission of notification reports to TTS, according to the policy.

The Defense Department also introduced a vulnerability disclosure policy that aims to facilitate reporting of cyber vulnerabilities in DoD websites.

Check Also

GAO: Air Force to Deploy New Combat Rescue Helicopters to Active Component by FY 2020

The Government Accountability Office has found that the U.S. Air Force intends to start fielding in fiscal 2020 new Combat Rescue Helicopters to replace aging HH-60G Pave Hawk helicopters that have recorded the most flight time when it comes to staff recovery missions. GAO said in a report published Thursday the service will initially deploy the new helicopters to the active component six years ahead of the reserve component and to the Air National Guard by 2027.

Leave a Reply

Your email address will not be published. Required fields are marked *