An AI model extracted this from the bill’s official record and can make mistakes. Check the official text ↗ (opens in new tab)

Federal Acquisition Regulation (FAR)

The primary set of rules governing how the U.S. federal government purchases goods and services from private companies.

Vulnerability Disclosure Policy

A formal plan or process that outlines how an organization receives, assesses, and responds to reports of security weaknesses in its systems from outside parties.

National Institute of Standards and Technology (NIST)

A government agency that develops technology, metrics, and standards to drive innovation and improve cybersecurity, among other areas.

Cybersecurity and Infrastructure Security Agency (CISA)

A U.S. federal agency responsible for strengthening the cybersecurity and infrastructure security of the nation.

Covered contractor

A contractor that has a federal contract at or above a certain dollar amount, or one that manages or uses a federal information system on behalf of an agency.

Security vulnerability

A weakness in a computer system or network that can be exploited by an attacker to gain unauthorized access or cause harm.

Simplified acquisition threshold