Duo signed a joint letter penned by Rapid7 recommending the addition of a vulnerability disclosure and handling process in the National Institute of Standard and Technology’s (NIST) cybersecurity framework.
Many other security companies and organizations, such as Cisco, Symantec, and the Center for Democracy & Technology also signed the letter.
According to Rapid7, if the Framework includes this revision, they hope it will lead to more companies and government agencies adopting the proposed process and in turn bolster overall security and communication among researchers.
Check out the blog for the details.
