[whiskeykilo]

It's slow going but we'll get there eventually. NIST made a recent revision to SP 800-53 that includes responsible disclosure as a recommendation: https://csrc.nist.gov/publications/detail/sp/800-53b/final

[Schiendelman]

Thanks very much, I hadn’t seen this and it’s good news!