CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0
Vulnerability Management

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 CPG-5.D: Vulnerability Disclosure Program

Establish a vulnerability disclosure policy (VDP) allowing external researchers to report security vulnerabilities. Maintain a security.txt file.

Other controls in Vulnerability Management

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 controls