H.R. 872
Requires security flaw reporting rules for contractors
Requires certain federal contractors to set up ways to find and report security flaws, and directs agencies to update contracting rules to include them.
- Applies to contracts of at least $250,000 or contractors using federal information systems
- Office of Management and Budget must suggest updated contract language for finding and reporting security flaws
- Contractors would need policies for finding and reporting security flaws that follow federal standards
- Defense Department must make similar updates to its supplement to the Federal Acquisition Regulation
Passed the House · Senate's turn