BaselineWatch
Desk

VER-RPT-RPD Responsible Public Disclosure

FedRAMP Consolidated Rules (2026) 2026.10.08.01 against 2026.10.05.01
All changes in this version
unchanged VER: Vulnerability Evaluation and Reporting

Title

Responsible Public Disclosure

Control

Providers MAY responsibly disclose vulnerabilities publicly or with other parties if the provider determines doing so will NOT likely lead to exploitation.