| Text of Recommendation | Develop and implement vulnerability disclosure-handling procedures that describe the SEC’s process for implementing its VDP, in accordance with Department of Homeland Security Binding Operational Directive 20-01. |
|---|---|
| Recommendation Number | 3 |
| Recommendation Status | Open |
| Significant Recommendation | Yes |
| Recommendation Questioned Costs | $0 |
| Recommendation Funds for Better Use | $0 |
| Submitting OIG | |
|---|---|
| Report Title | Fiscal Year 2023 Independent Evaluation of SEC’s Implementation of the Federal Information Security Modernization Act of 2014 Evaluation Report |
| Report Submitting OIG-Specific Report Number | 580 |
| Report Date Issued | Wednesday, December 20, 2023 |
| Report Agency Reviewed / Investigated | |
| Report Questioned Costs | $0 |
| Report Funds for Better Use | $0 |