H.R.872

Requires covered contractors to implement a vulnerability disclosure policy consistent with NIST guidelines.

Requires covered contractors to implement a vulnerability disclosure policy consistent with NIST guidelines for contractors. The bill mandates the Director of the Office of Management and Budget to review and recommend updates to the Federal Acquisition Regulation (FAR) to incorporate these requirements. The Secretary of Defense must review and revise the Department of Defense Supplement to the FAR to ensure covered contractors receive information about potential security vulnerabilities.