Enhancing the Digital Economy Through Collaboration on Vulnerability Research Disclosure

Promoting and preserving the digital ecosystem is a core mission of the Department of Commerce, and the security and resiliency of that ecosystem is vital. For the digital economy to thrive, users must trust that their personal data and the systems and websites they use every day are as secure as possible. To help support this goal, the Department of Commerce announced in March an initiative to address key cybersecurity issues facing the digital economy that could be best addressed by a consensus-based multistakeholder process.

Based on input from a broad range of stakeholders, we are announcing that the first cybersecurity multistakeholder process will launch in September and will focus on vulnerability research disclosure. The goal of this process will be to bring together security researchers, software vendors, and those interested in a more secure digital ecosystem to create common principles and best practices around the disclosure of and response to new security vulnerability information. We welcome broad participation and diverse perspectives, particularly from small businesses, independent security researchers, and those with experience on all sides of the disclosure question. Our meetings will be webcast to allow participation by those unable to attend in person.