Read and Download Free eBooks
/
Categories
Browse by category
1,965 books to get lost inYours to read. Yours to keep.
No books found.
Try another title or author.
Try another title or author.
This NIST report sets out recommendations for receiving, assessing and communicating reports of security vulnerabilities in federal systems. It treats disclosure as an organised process involving people, responsibilities and records, rather than as the simple publication of a technical finding.
Kim Schaffer, Peter Mell, Hung Trinh and Isabel Van Wyk describe the roles of vulnerability disclosure programme offices, system owners and a federal coordination body. Their framework follows reports from receipt through evaluation and remediation, addressing the communication needed among researchers, agencies and other affected parties.
Definitions and process diagrams help distinguish reporting, tracking and advisory activities. The report also discusses the policy and operational arrangements that allow an organisation to handle findings consistently. Its scope is the management of disclosure and coordination; it provides an original federal reference for adult readers working in information security, software maintenance or public-sector technology.
Kim Schaffer, Peter Mell, Hung Trinh and Isabel Van Wyk. NIST SP800-216 (2023). https://doi.org/10.6028/NIST.SP.800-216.