An AI model extracted this from the bill’s official record and can make mistakes. Check the official text ↗ (opens in new tab)

Vulnerability Disclosure Policy

A formal plan that outlines how an organization will receive, investigate, and fix reports of security weaknesses (vulnerabilities) in its computer systems or products.

NIST Guidelines

Cybersecurity recommendations and best practices developed by the National Institute of Standards and Technology, a U.S. government agency that promotes innovation and industrial competitiveness.

Federal Acquisition Regulation (FAR)

The primary set of rules used by all federal executive agencies in the United States for purchasing goods and services.

Department of Defense Supplement to the Federal Acquisition Regulation (DFARS)

Additional rules and regulations specific to the Department of Defense that supplement the standard Federal Acquisition Regulation.

Covered Contractor

A company that has a federal contract above a certain monetary value or that manages federal computer systems on behalf of a government agency.

Security Vulnerability

A weakness or flaw in a computer system, network, or software that could be exploited by an attacker to gain unauthorized access or cause harm.

Simplified Acquisition Threshold