Vulnerability Disclosure Policy | U.S. Department of Commerce

<!DOCTYPE html> <html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# "> <head><script type="text/javascript" src="/_static/js/bundle-playback.js?v=HxkREWBo" charset="utf-8"></script> <script type="text/javascript" src="/_static/js/wombat.js?v=txqj7nKC" charset="utf-8"></script> <script>window.RufflePlayer=window.RufflePlayer||{};window.RufflePlayer.config={"autoplay":"on","unmuteOverlay":"hidden"};</script> <script type="text/javascript" src="/_static/js/ruffle/ruffle.js"></script> <script type="text/javascript"> __wm.init("https://web.archive.org/web"); __wm.wombat("https://www.commerce.gov/vulnerability-disclosure-policy","20220603012400","https://web.archive.org/","web","/_static/", "1654219440"); </script> <link rel="stylesheet" type="text/css" href="/_static/css/banner-styles.css?v=S1zqJCYt" /> <link rel="stylesheet" type="text/css" href="/_static/css/iconochive.css?v=3PDvdIFv" />  <meta charset="utf-8"/> <noscript><style>form.antibot * :not(.antibot-message) { display: none !important; }</style> </noscript><script>(function(i,s,o,g,r,a,m){i["GoogleAnalyticsObject"]=r;i[r]=i[r]||function(){(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)})(window,document,"script","https://web.archive.org/web/20220603012400/https://www.google-analytics.com/analytics.js","ga");ga("create", "UA-122485059-1", {"cookieDomain":"auto"});ga("set", "anonymizeIp", true);ga('require', 'GTM-K9DFFGH');ga("send", "pageview");</script> <link rel="canonical" href="https://web.archive.org/web/20220603012400/https://www.commerce.gov/vulnerability-disclosure-policy"/> <link rel="shortlink" href="https://web.archive.org/web/20220603012400/https://www.commerce.gov/node/3454"/> <meta name="generator" content="Drupal 8 (https://www.drupal.org)"/> <meta name="description" content="Introduction The United States (U.S.) Department of Commerce (DOC) manages data critical to creating conditions for U.S. economic growth and opportunity."/> <meta name="keywords" content=","/> <meta property="og:site_name" content="U.S. Department of Commerce"/> <meta property="og:type" content="Website"/> <meta property="og:url" content="https://web.archive.org/web/20220603012400/https://www.commerce.gov/vulnerability-disclosure-policy"/> <meta property="og:title" content="Vulnerability Disclosure Policy"/> <meta property="og:description" content="Introduction The United States (U.S.) Department of Commerce (DOC) manages data critical to creating conditions for U.S. economic growth and opportunity."/> <meta property="og:updated_time" content="2021-07-28T13:56:44-04:00"/> <meta name="twitter:card" content="summary_large_image"/> <meta name="twitter:site" content="@CommerceGov"/> <meta name="twitter:description" content="Introduction The United States (U.S.) Department of Commerce (DOC) manages data critical to creating conditions for U.S. economic growth and opportunity."/> <meta name="twitter:title" content="Vulnerability Disclosure Policy"/> <meta name="twitter:url" content="https://web.archive.org/web/20220603012400im_/https://www.commerce.gov/vulnerability-disclosure-policy"/> <meta name="twitter:image" content="https://web.archive.org/web/20220603012400im_/https://www.commerce.gov/sites/default/files/2021-03/commerce_twittercard_default.png"/> <meta name="Generator" content="Drupal 9 (https://www.drupal.org)"/> <meta name="MobileOptimized" content="width"/> <meta name="HandheldFriendly" content="true"/> <meta name="viewport" content="width=device-width, initial-scale=1.0"/> <link rel="icon" href="/web/20220603012400im_/https://www.commerce.gov/themes/custom/commerce/assets/img/favicons/favicon.svg" type="image/svg+xml"/> <title>Vulnerability Disclosure Policy | U.S. Department of Commerce</title> <link rel="stylesheet" media="all" href="/web/20220603012400cs_/https://www.commerce.gov/sites/default/files/css/css_KmoWlcUpKVW2cv4FYgMmKV8voWQCX6k9VATuyRrGJ7o.css"/> <link rel="stylesheet" media="all" href="/web/20220603012400cs_/https://www.commerce.gov/sites/default/files/css/css_YGypp-5tSoxBX2hoRWpQf1UQ9nLkw6fST2g5_YK0YVw.css"/> <link rel="stylesheet" media="all" href="/web/20220603012400cs_/https://www.commerce.gov/sites/default/files/css/css_yU0bMU7YlWXTyh0BwzpXS8T4EfwSfpM-Aj8ngZAVR7Y.css"/> <script src="//web.archive.org/web/20220603012400js_/https://use.fontawesome.com/releases/v5.12.0/js/all.js" defer crossorigin="anonymous"></script> <script src="//web.archive.org/web/20220603012400js_/https://use.fontawesome.com/releases/v5.12.0/js/v4-shims.js" defer crossorigin="anonymous"></script> <link rel="apple-touch-icon" sizes="180x180" href="/web/20220603012400im_/https://www.commerce.gov/themes/custom/commerce/assets/img/favicons/apple-touch-icon.png"> <link rel="icon" type="image/png" sizes="32x32" href="/web/20220603012400im_/https://www.commerce.gov/themes/custom/commerce/assets/img/favicons/favicon-32x32.png"> <link rel="icon" type="image/png" sizes="16x16" href="/web/20220603012400im_/https://www.commerce.gov/themes/custom/commerce/assets/img/favicons/favicon-16x16.png"> <link rel="manifest" href="/web/20220603012400/https://www.commerce.gov/themes/custom/commerce/assets/img/favicons/site.webmanifest"> <link rel="mask-icon" href="/web/20220603012400im_/https://www.commerce.gov/themes/custom/commerce/assets/img/favicons/safari-pinned-tab.svg" color="#5bbad5"> <meta name="msapplication-TileColor" content="#2b5797"> <meta name="theme-color" content="#ffffff"> </head> <body class="doc-site doc-frontpage doc-node path-node page-node-type-page"> <div class="skip-main" role="complementary" aria-label="skip-to-main"> <a href="#main-content" class="visually-hidden focusable skip-link"> Skip to main content </a> </div> <div class="dialog-off-canvas-main-canvas" data-off-canvas-main-canvas> <section class="usa-banner" aria-label="Official government website"> <div class="usa-accordion"> <header class="usa-banner__header"> <div class="usa-banner__inner"> <div class="grid-col-auto"> <img class="usa-banner__header-flag" src="/web/20220603012400im_/https://www.commerce.gov/themes/custom/commerce/assets/img/us_flag_small.png" alt="U.S. flag"> </div> <div class="grid-col-fill tablet:grid-col-auto"> <p class="usa-banner__header-text">An official website of the United States government</p> <p class="usa-banner__header-action" aria-hidden="true">Here’s how you know</p> </div> <button class="usa-accordion__button usa-banner__button" aria-expanded="false" aria-controls="gov-banner"> <span class="usa-banner__button-text">Here’s how you know</span> </button> </div> </header> <div class="usa-banner__content usa-accordion__content" id="gov-banner"> <div class="grid-row grid-gap-lg"> <div class="usa-banner__guidance tablet:grid-col-6"> <img class="usa-banner__icon usa-media-block__img" src="/web/20220603012400im_/https://www.commerce.gov/themes/custom/commerce/assets/img/icon-dot-gov.svg" role="presentation" alt="Dot gov"> <div class="usa-media-block__body"> <p> <strong> Official websites use .gov </strong> <br/> A <strong>.gov</strong> website belongs to an official government organization in the United States. </p> </div> </div> <div class="usa-banner__guidance tablet:grid-col-6"> <img class="usa-banner__icon usa-media-block__img" src="/web/20220603012400im_/https://www.commerce.gov/themes/custom/commerce/assets/img/icon-https.svg" role="presentation" alt="Https"> <div class="usa-media-block__body"> <p> <strong> Secure .gov websites use HTTPS </strong> <br/> A <strong>lock</strong> (<span class="icon-lock"><svg xmlns="http://www.w3.org/2000/svg" width="52" height="64" viewbox="0 0 52 64" class="usa-banner__lock-image" role="presentation" aria-labelledby="banner-lock-title banner-lock-description"><title id="banner-lock-title">Lock</title><desc id="banner-lock-description">A locked padlock</desc><path fill="#000000" fill-rule="evenodd" d="M26 0c10.493 0 19 8.507 19 19v9h3a4 4 0 0 1 4 4v28a4 4 0 0 1-4 4H4a4 4 0 0 1-4-4V32a4 4 0 0 1 4-4h3v-9C7 8.507 15.507 0 26 0zm0 8c-5.979 0-10.843 4.77-10.996 10.712L15 19v9h22v-9c0-6.075-4.925-11-11-11z"/></svg></span>) or <strong>https://</strong> means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites. </p> </div> </div> </div> </div> </div> </section> <div class="usa-overlay"></div> <header class="usa-header usa-header--extended usa-header--extended-megamenu" role="banner"> <div class="usa-navbar"> <div class="region region-header"> <div class="usa-logo with-seal" id="logo"> <div class="doc-seal"> <a class="logo-img" href="/web/20220603012400/https://www.commerce.gov/" title="Home" aria-label="U.S. Department of Commerce"> <img src="/web/20220603012400im_/https://www.commerce.gov/themes/custom/commerce/assets/img/doc_logo.png" width="92" height="92" alt="U.S. Department of Commerce Logo"/> </a> </div> <div class="doc-office-title"> <h1 class="usa-logo-text"> <a href="/web/20220603012400/https://www.commerce.gov/" accesskey="1" title="Home" aria-label="U.S. Department of Commerce"> U.S. Department of Commerce </a> </h1> </div> </div> </div> <button class="usa-menu-btn">Menu</button> </div> <nav class="usa-nav" role="navigation"> <button class="usa-nav__close"> <img src="/web/20220603012400im_/https://www.commerce.gov/themes/custom/commerce/assets/img/close.svg" alt="close"/> </button> <div class="usa-nav__inner"> <div class="usa-nav-mobile"> <div class="region region-mobile-menu"> <div id="block-fixed-block-content-doc-mobile-search-fixed-block" class="block block-fixed-block-content block-fixed-block-contentdoc-mobile-search-fixed-block"> <div class="clearfix text-formatted field field--name-body field--type-text-with-summary field--label-hidden field__item"><div class="usasearch-search-block-form usa-form-large block block-usasearch block-usasearch-search-form-block" data-drupal-selector="usasearch-search-block-form" id="commerce_search_block_mobile"> <form accept-charset="UTF-8" action="https://web.archive.org/web/20220603012400/https://search.commerce.gov/search" class="usa-search usa-search--small" data-drupal-selector="usasearch-search-block-form-2" method="GET"> <div class="js-form-item form-item js-form-type-search form-item-query js-form-item-query form-no-label"><label class="visually-hidden" for="mobile_query">Search</label> <input aria-autocomplete="list" aria-haspopup="" autocomplete="off" class="usagov-search-autocomplete form-search" data-drupal-selector="edit-query" id="mobile_query" maxlength="128" name="query" placeholder="Search" size="50" title="Enter the terms you wish to search for." type="search" value=""/></div> <input data-drupal-selector="edit-affiliate" name="affiliate" type="hidden" value="www.commerce.gov"/> <div class="form-actions js-form-wrapper form-wrapper"><input class="usa-button js-form-submit form-submit" type="submit" value="Search"/></div> </form> </div> </div> </div> <ul class="usa-nav__mobile usa-accordion" aria-multiselectable="true"> <li class="usa-nav__primary-item"> <button class="usa-accordion__button usa-nav__link usa-current" aria-expanded="true" aria-controls="basic-mega-nav-section-/about"> <span>ABOUT</span> </button> <div id="basic-mega-nav-section-/about" class="usa-nav__submenu usa-megamenu" hidden=""> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/about"> <span>Our mission </span> </a> </div> </div> <div class="usa-col level-1"> <button class="usa-accordion__button usa-nav__link commerce-menu-sub-levels aria-expanded=" false" aria-controls="basic-nav-section-/about/leadership/gina-m-raimondo"> <span>Meet the Secretary</span> </button> <ul id="basic-nav-section-/about/leadership/gina-m-raimondo" class="usa-nav__submenu-list" hidden=""> <div class="usa-col level-2"> <a href="https://web.archive.org/web/20220603012400/https://www.commerce.gov/news/blog?tags%5B0%5D=243"> <span>Blogs </span> </a> </li> <div class="usa-col level-2"> <a href="https://web.archive.org/web/20220603012400/https://www.commerce.gov/news/press-releases?tags%5B0%5D=243"> <span>Press Releases </span> </a> </li> <div class="usa-col level-2"> <a href="https://web.archive.org/web/20220603012400/https://www.commerce.gov/news/speeches?tags%5B0%5D=243"> <span>Speeches </span> </a> </li> <div class="usa-col level-2"> <a href="https://web.archive.org/web/20220603012400/https://www.commerce.gov/news/op-eds?tags%5B0%5D=243"> <span>Op-eds </span> </a> </li> </ul> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/about/leadership"> <span>Leadership </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/bureaus-and-offices"> <span>Bureaus and offices </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/about/strategic-plan"> <span>Strategic Plan </span> </a> </div> </div> <div class="usa-col level-1"> <button class="usa-accordion__button usa-nav__link commerce-menu-sub-levels aria-expanded=" false" aria-controls="basic-nav-section-/equity"> <span>Equity</span> </button> <ul id="basic-nav-section-/equity" class="usa-nav__submenu-list" hidden=""> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/interagencyequityconvening"> <span>Interagency Convening on Equitable Economic Growth </span> </a> </li> </ul> </div> <div class="usa-col level-1"> <button class="usa-accordion__button usa-nav__link commerce-menu-sub-levels aria-expanded=" false" aria-controls="basic-nav-section-/about/budget-and-performance"> <span>Budget and performance</span> </button> <ul id="basic-nav-section-/about/budget-and-performance" class="usa-nav__submenu-list" hidden=""> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/gears-government-awards"> <span>Gears of Government Awards </span> </a> </li> </ul> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/covid-19-information-hub"> <span>COVID-19 Information Hub </span> </a> </div> </div> <div class="usa-col level-1"> <button class="usa-accordion__button usa-nav__link commerce-menu-sub-levels aria-expanded=" false" aria-controls="basic-nav-section-/about/history"> <span>History</span> </button> <ul id="basic-nav-section-/about/history" class="usa-nav__submenu-list" hidden=""> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/about/history/origins"> <span>Origins: 1776-1913 </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/about/history/evolution"> <span>Evolution: 1913-1995 </span> </a> </li> <div class="usa-col level-2"> <a href="https://web.archive.org/web/20220603012400/http://2001-2009.commerce.gov/opa/photo/DOC_100/100yrs/Gallery.html"> <span>Photos from 100th anniversary </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/about/history/past-secretaries"> <span>Secretaries of Commerce </span> </a> </li> <div class="usa-col level-2"> <a href="https://web.archive.org/web/20220603012400/http://library.doc.gov/about-us/doc-history/secretaries-speeches"> <span>Speeches of past Secretaries </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/about/history/hchb"> <span>Herbert Clark Hoover Building </span> </a> </li> </ul> </div> <div class="usa-col level-1"> <button class="usa-accordion__button usa-nav__link commerce-menu-sub-levels aria-expanded=" false" aria-controls="basic-nav-section-/about/policies"> <span>Policies</span> </button> <ul id="basic-nav-section-/about/policies" class="usa-nav__submenu-list" hidden=""> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/about/policies/accessibility"> <span>Accessibility </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/about/policies/comments"> <span>Comment policy </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/digitalstrategy"> <span>Digital strategy </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/about/policies/ipv6-policy"> <span>IPv6 policy </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/about/policies/it-policy-archive"> <span>IT policy archive </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/about/policies/information-quality"> <span>Information quality </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/about/policies/source-code"> <span>Open source code </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/about/policies/plain-language"> <span>Plain language </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/about/policies/privacy"> <span>Privacy policy </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/about/policies/social-media"> <span>Social media and web 2.0 policy </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/vulnerability-disclosure-policy"> <span>Vulnerability Disclosure Policy </span> </a> </li> </ul> </div> <div class="usa-col level-1"> <button class="usa-accordion__button usa-nav__link commerce-menu-sub-levels aria-expanded=" false" aria-controls="basic-nav-section-/about/contact-us"> <span>Contact us</span> </button> <ul id="basic-nav-section-/about/contact-us" class="usa-nav__submenu-list" hidden=""> <div class="usa-col level-2"> <a href="https://web.archive.org/web/20220603012400/https://staff.commerce.gov/"> <span>Staff directory </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/about/contact-us/site-feedback"> <span>Website feedback </span> </a> </li> </ul> </div> </div> </li> <li class="usa-nav__primary-item"> <button class="usa-accordion__button usa-nav__link aria-expanded=" false" aria-controls="basic-mega-nav-section-/issues"> <span>ISSUES</span> </button> <div id="basic-mega-nav-section-/issues" class="usa-nav__submenu usa-megamenu" hidden=""> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues"> <span>All issues </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/2020-census"> <span>2020 Census </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/cybersecurity"> <span>Cybersecurity </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/export-and-investment-promotion"> <span>Export and investment promotion </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/first-responder-network"> <span>First responder network </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/fisheries-and-aquaculture"> <span>Fisheries and aquaculture </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/ict-supply-chain"> <span>ICT Supply Chain </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/infrastructure"> <span>Infrastructure </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/intellectual-property"> <span>Intellectual property </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/investing-communities-and-workers"> <span>Investing in communities and workers </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/manufacturing"> <span>Manufacturing </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/minority-business-growth"> <span>Minority business growth </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/regulatory-reform"> <span>Regulatory reform </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/space-commerce"> <span>Space commerce </span> </a> </div> </div> <div class="usa-col level-1"> <button class="usa-accordion__button usa-nav__link commerce-menu-sub-levels aria-expanded=" false" aria-controls="basic-nav-section-/issues/trade-enforcement"> <span>Trade enforcement</span> </button> <ul id="basic-nav-section-/issues/trade-enforcement" class="usa-nav__submenu-list" hidden=""> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/issues/trade-enforcement/section-232-aluminum"> <span>Section 232: Aluminum </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/issues/trade-enforcement/section-232-steel"> <span>Section 232: Steel </span> </a> </li> </ul> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/weather-and-satellites"> <span>Weather and satellites </span> </a> </div> </div> </div> </li> <li class="usa-nav__primary-item"> <button class="usa-accordion__button usa-nav__link aria-expanded=" false" aria-controls="basic-mega-nav-section-/news"> <span>NEWS</span> </button> <div id="basic-mega-nav-section-/news" class="usa-nav__submenu usa-megamenu" hidden=""> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/news"> <span>All news </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/news/press-releases"> <span>Press releases </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/news/blog"> <span>Blog </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/news/speeches"> <span>Speeches </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/news/fact-sheets"> <span>Fact sheets </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/news/op-eds"> <span>Op-eds </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/media"> <span>Photos and videos </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/live"> <span>Livestreams </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/archives"> <span>Archives </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/news/media-contacts"> <span>Media contacts </span> </a> </div> </div> </div> </li> <li class="usa-nav__primary-item"> <button class="usa-accordion__button usa-nav__link aria-expanded=" false" aria-controls="basic-mega-nav-section-/data-and-reports"> <span>DATA AND REPORTS</span> </button> <div id="basic-mega-nav-section-/data-and-reports" class="usa-nav__submenu usa-megamenu" hidden=""> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports"> <span>Overview </span> </a> </div> </div> <div class="usa-col level-1"> <button class="usa-accordion__button usa-nav__link commerce-menu-sub-levels aria-expanded=" false" aria-controls="basic-nav-section-/data-and-reports/economic-indicators"> <span>Economic indicators</span> </button> <ul id="basic-nav-section-/data-and-reports/economic-indicators" class="usa-nav__submenu-list" hidden=""> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports/economic-indicators/dashboard"> <span>Dashboard </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports/economic-indicators/release-schedule"> <span>Release schedule </span> </a> </li> </ul> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports/population-statistics"> <span>Population statistics </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports/environmental-data"> <span>Environmental data </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="https://web.archive.org/web/20220603012400/https://data.commerce.gov/"> <span>Data catalog </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports/reports"> <span>Reports </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="https://web.archive.org/web/20220603012400/https://performance.commerce.gov/"> <span>Performance data </span> </a> </div> </div> <div class="usa-col level-1"> <button class="usa-accordion__button usa-nav__link commerce-menu-sub-levels aria-expanded=" false" aria-controls="basic-nav-section-/data-and-reports/developer-resources"> <span>Developer resources</span> </button> <ul id="basic-nav-section-/data-and-reports/developer-resources" class="usa-nav__submenu-list" hidden=""> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports/developer-resources/data-tutorials"> <span>Data tutorials </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports/developer-resources/bureau-apis"> <span>Bureau APIs </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports/developer-resources/commercegov-api"> <span>Commerce.gov API </span> </a> </li> <div class="usa-col level-2"> <a href="/web/20220603012400/https://www.commerce.gov/rss"> <span>RSS feeds </span> </a> </li> </ul> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports/data"> <span>Data </span> </a> </div> </div> </div> </li> <li class="usa-nav__primary-item"> <button class="usa-accordion__button usa-nav__link aria-expanded=" false" aria-controls="basic-mega-nav-section-/work-with-us"> <span>WORK WITH US</span> </button> <div id="basic-mega-nav-section-/work-with-us" class="usa-nav__submenu usa-megamenu" hidden=""> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/work-with-us"> <span>Overview </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/work-with-us/services-for-businesses"> <span>Services for businesses </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/work-with-us/grants-and-contract-opportunities"> <span>Grants and contract opportunities </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/work-with-us/careers"> <span>Careers </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="https://web.archive.org/web/20220603012400/https://www.census.gov/about/combined-federal-campaign.html"> <span>Combined Federal Campaign </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/work-with-us/internships"> <span>Internships </span> </a> </div> </div> <div class="usa-col level-1"> <div class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/work-with-us/resources-for-employees"> <span>Resources for employees </span> </a> </div> </div> </div> </li> </ul> <ul class="usa-nav__mobile usa-accordion" aria-multiselectable="true"> <li class="usa-nav__primary-item"> <a href="/web/20220603012400/https://www.commerce.gov/bureaus-and-offices"> <span>Bureaus and offices </span> </a> </li> <li class="usa-nav__primary-item"> <a href="/web/20220603012400/https://www.commerce.gov/about/contact-us"> <span>Contact us </span> </a> </li> </ul> </div> </div> <div class="usa-nav__secondary"> <div class="region region-secondary-menu"> <div class="usa-nav__secondary"> <ul class="usa-nav__secondary-links"> <li> <a href="/web/20220603012400/https://www.commerce.gov/bureaus-and-offices"> Bureaus and offices </a> </li> <li> <a href="/web/20220603012400/https://www.commerce.gov/about/contact-us"> Contact us </a> </li> </ul> </div> <div class="secondary-menu-search block block-fixed-block-content block-fixed-block-contentdoc-search-block-fixed-block" id="block-fixed-block-content-doc-search-block-fixed-block"> <div class="clearfix text-formatted field field--name-body field--type-text-with-summary field--label-hidden field__item"><div class="usasearch-search-block-form usa-form-large block block-usasearch block-usasearch-search-form-block" data-drupal-selector="usasearch-search-block-form" id="commerce_search_block"> <form accept-charset="UTF-8" action="https://web.archive.org/web/20220603012400/https://search.commerce.gov/search" class="usasearch-search-block-form-desktop usa-form-large" data-drupal-selector="usasearch-search-block-form-2" id="usasearch-search-block-form--2" method="GET"> <div class="js-form-item form-item js-form-type-search form-item-query js-form-item-query form-no-label"><label class="visually-hidden" for="desktop_query">Search</label> <input aria-autocomplete="list" aria-haspopup="" autocomplete="off" class="usagov-search-autocomplete form-search" data-drupal-selector="edit-query" id="desktop_query" maxlength="128" name="query" placeholder="Search" size="60" title="Enter the terms you wish to search for." type="search" value=""/></div> <input data-drupal-selector="edit-affiliate" name="affiliate" type="hidden" value="www.commerce.gov"/> <div class="form-actions js-form-wrapper form-wrapper" data-drupal-selector="edit-actions" id="edit-actions--2"><input class="usa-button js-form-submit form-submit" data-drupal-selector="edit-submit" id="edit-submit--2" type="submit" value="Search"/></div> </form> </div> </div> </div> </div> </div> <div class="usa-nav-desktop"> <div class="region region-primary-menu"> <ul class="usa-nav__primary usa-accordion"> <li class="usa-nav__primary-item"> <button class="usa-accordion__button usa-nav__link usa-current" aria-expanded="false" aria-controls="basic-nav-section-1"> <span>ABOUT </span> </button> <ul id="basic-nav-section-1" class="usa-nav__submenu" hidden=""> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/about"> <span>Our mission</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/about/leadership/gina-m-raimondo"> <span>Meet the Secretary</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/about/leadership"> <span>Leadership</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/bureaus-and-offices"> <span>Bureaus and offices</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/about/strategic-plan"> <span>Strategic Plan</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/equity"> <span>Equity</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/about/budget-and-performance"> <span>Budget and performance</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/covid-19-information-hub"> <span>COVID-19 Information Hub</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/about/history"> <span>History</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/about/policies"> <span>Policies</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/about/contact-us"> <span>Contact us</span> </a> </li> </ul> </li> <li class="usa-nav__primary-item"> <button class="usa-accordion__button usa-nav__link " aria-expanded="false" aria-controls="basic-nav-section-2"> <span>ISSUES </span> </button> <ul id="basic-nav-section-2" class="usa-nav__submenu" hidden=""> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues"> <span>All issues</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/2020-census"> <span>2020 Census</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/cybersecurity"> <span>Cybersecurity</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/export-and-investment-promotion"> <span>Export and investment promotion</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/first-responder-network"> <span>First responder network</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/fisheries-and-aquaculture"> <span>Fisheries and aquaculture</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/ict-supply-chain"> <span>ICT Supply Chain</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/infrastructure"> <span>Infrastructure</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/intellectual-property"> <span>Intellectual property</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/investing-communities-and-workers"> <span>Investing in communities and workers</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/manufacturing"> <span>Manufacturing</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/minority-business-growth"> <span>Minority business growth</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/regulatory-reform"> <span>Regulatory reform</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/space-commerce"> <span>Space commerce</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/trade-enforcement"> <span>Trade enforcement</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/issues/weather-and-satellites"> <span>Weather and satellites</span> </a> </li> </ul> </li> <li class="usa-nav__primary-item"> <button class="usa-accordion__button usa-nav__link " aria-expanded="false" aria-controls="basic-nav-section-3"> <span>NEWS </span> </button> <ul id="basic-nav-section-3" class="usa-nav__submenu" hidden=""> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/news"> <span>All news</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/news/press-releases"> <span>Press releases</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/news/blog"> <span>Blog</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/news/speeches"> <span>Speeches</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/news/fact-sheets"> <span>Fact sheets</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/news/op-eds"> <span>Op-eds</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/media"> <span>Photos and videos</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/live"> <span>Livestreams</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/archives"> <span>Archives</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/news/media-contacts"> <span>Media contacts</span> </a> </li> </ul> </li> <li class="usa-nav__primary-item"> <button class="usa-accordion__button usa-nav__link " aria-expanded="false" aria-controls="basic-nav-section-4"> <span>DATA AND REPORTS </span> </button> <ul id="basic-nav-section-4" class="usa-nav__submenu" hidden=""> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports"> <span>Overview</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports/economic-indicators"> <span>Economic indicators</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports/population-statistics"> <span>Population statistics</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports/environmental-data"> <span>Environmental data</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="https://web.archive.org/web/20220603012400/https://data.commerce.gov/"> <span>Data catalog</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports/reports"> <span>Reports</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="https://web.archive.org/web/20220603012400/https://performance.commerce.gov/"> <span>Performance data</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports/developer-resources"> <span>Developer resources</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports/data"> <span>Data</span> </a> </li> </ul> </li> <li class="usa-nav__primary-item"> <button class="usa-accordion__button usa-nav__link " aria-expanded="false" aria-controls="basic-nav-section-5"> <span>WORK WITH US </span> </button> <ul id="basic-nav-section-5" class="usa-nav__submenu" hidden=""> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/work-with-us"> <span>Overview</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/work-with-us/services-for-businesses"> <span>Services for businesses</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/work-with-us/grants-and-contract-opportunities"> <span>Grants and contract opportunities</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/work-with-us/careers"> <span>Careers</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="https://web.archive.org/web/20220603012400/https://www.census.gov/about/combined-federal-campaign.html"> <span>Combined Federal Campaign</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/work-with-us/internships"> <span>Internships</span> </a> </li> <li class="usa-nav__submenu-item"> <a href="/web/20220603012400/https://www.commerce.gov/work-with-us/resources-for-employees"> <span>Resources for employees</span> </a> </li> </ul> </li> </ul> </div> </div> </div> </nav> </header> <main class="usa-section"> <a id="main-content" tabindex="-1"></a> <div class="grid-container"> <div class="grid-row grid-gap"> <div class="grid-col-12"> <div class="region region-highlighted"> <div data-drupal-messages-fallback class="hidden"></div> </div> </div> </div> <div class="grid-row grid-gap"> <aside class="tablet:grid-col-3"> <div class="region region-sidebar-first"> <ul class="usa-sidenav"> <li class="usa-sidenav__item"> <a href="/web/20220603012400/https://www.commerce.gov/about"> <span>Our mission</span> </a> </li> <li class="usa-sidenav__item"> <a href="/web/20220603012400/https://www.commerce.gov/about/leadership/gina-m-raimondo"> <span>Meet the Secretary</span> </a> </li> <li class="usa-sidenav__item"> <a href="/web/20220603012400/https://www.commerce.gov/about/leadership"> <span>Leadership</span> </a> </li> <li class="usa-sidenav__item"> <a href="/web/20220603012400/https://www.commerce.gov/bureaus-and-offices"> <span>Bureaus and offices</span> </a> </li> <li class="usa-sidenav__item"> <a href="/web/20220603012400/https://www.commerce.gov/about/strategic-plan"> <span>Strategic Plan</span> </a> </li> <li class="usa-sidenav__item"> <a href="/web/20220603012400/https://www.commerce.gov/equity"> <span>Equity</span> </a> </li> <li class="usa-sidenav__item"> <a href="/web/20220603012400/https://www.commerce.gov/about/budget-and-performance"> <span>Budget and performance</span> </a> </li> <li class="usa-sidenav__item"> <a href="/web/20220603012400/https://www.commerce.gov/covid-19-information-hub"> <span>COVID-19 Information Hub</span> </a> </li> <li class="usa-sidenav__item"> <a href="/web/20220603012400/https://www.commerce.gov/about/history"> <span>History</span> </a> </li> <li class="usa-sidenav__item"> <a href="/web/20220603012400/https://www.commerce.gov/about/policies"> <span>Policies</span> </a> </li> <li class="usa-sidenav__item"> <a href="/web/20220603012400/https://www.commerce.gov/about/contact-us"> <span>Contact us</span> </a> </li> </ul> <div id="block-votingblock-2" class="block block-voting-modal block-modal-block"> <h2>Was this page helpful?</h2> <button type="submit" href="/voting/modal/3454/true" class="usa-button-secondary use-ajax" data-dialog-type="modal"><i alt="Thumbs up icon to indicate helpful" class="fas fa-thumbs-up"></i>  Helpful        </button><button type="submit" href="/voting/modal/3454/false" class="usa-button-secondary use-ajax" data-dialog-type="modal"><i alt="Thumbs down icon to indicate not helpful" class="fas fa-thumbs-down"></i>  Not helpful</button> </div> </div> </aside> <div class="region-content tablet:grid-col-fill"> <div class="region region-content"> <div class="block block-system block-system-breadcrumb-block"> <h2 id="system-breadcrumb" class="visually-hidden">Breadcrumb</h2> <ol class="add-list-reset uswds-breadcrumbs uswds-horizontal-list"> <li> <a href="/web/20220603012400/https://www.commerce.gov/">Home</a> </li> </ol> </div> <div id="block-votingblock" class="block block-voting-modal block-modal-block"> <h2>Was this page helpful?</h2> <button type="submit" href="/voting/modal/3454/true" class="usa-button-secondary use-ajax" data-dialog-type="modal"><i alt="Thumbs up icon to indicate helpful" class="fas fa-thumbs-up"></i>  Helpful        </button><button type="submit" href="/voting/modal/3454/false" class="usa-button-secondary use-ajax" data-dialog-type="modal"><i alt="Thumbs down icon to indicate not helpful" class="fas fa-thumbs-down"></i>  Not helpful</button> </div> <div class="block block-core block-page-title-block"> <h1 class="uswds-page-title page-title"><span property="schema:name" class="field field--name-title field--type-string field--label-hidden">Vulnerability Disclosure Policy </span> </h1> </div> <div id="block-commerce-content" class="block block-system block-system-main-block"> <article data-history-node-id="3454" role="article" about="/vulnerability-disclosure-policy" typeof="schema:WebPage"> <span property="schema:name" content="Vulnerability Disclosure Policy " class="rdf-meta hidden"></span> <div> <div property="schema:text" class="clearfix text-formatted field field--name-body field--type-text-with-summary field--label-hidden field__item"><p><strong>Introduction</strong></p> <p>The United States (U.S.) Department of Commerce (DOC) manages data critical to creating conditions for U.S. economic growth and opportunity.</p> <p>The DOC is committed to ensuring the security of the U.S. public by protecting the public’s information from unwarranted disclosure. As such, the DOC has created a Vulnerability Disclosure Policy (VDP) and Vulnerability Disclosure Program, to give security researchers clear guidelines for conducting vulnerability discovery activities on DOC systems and websites, as well to convey the DOC’s preferences in how to submit discovered vulnerabilities to the DOC.</p> <p>The DOC’s Vulnerability Disclosure Policy describes what systems and types of research are covered under this program, how to submit vulnerability reports, and requirements for public disclosure of submitted vulnerabilities.</p> <p><strong>Authorization</strong></p> <p>Security researchers must comply with all applicable Federal, State, and local laws in connection with the security research activities or other participation in this Vulnerability Disclosure Program.</p> <p>Efforts made in good faith to comply with this policy during all security research will be considered authorized. The DOC will work with the researcher to understand and quickly resolve issues and will not recommend or pursue legal action related to your research. Should legal action be initiated by a third party against the security researcher for research conducted in accordance with this policy, the DOC will reaffirm this authorization.</p> <p><strong>Applicability and Scope</strong></p> <p>This policy is for security researchers interested in reporting system security vulnerabilities and is intended for authorized DOC publicly available systems/services only. This policy applies to anyone wishing to conduct vulnerability discovery activities, including research and testing conducted on the DOC’s publicly available systems/services within the DOC.gov domains. Specifically, this policy applies to the following systems and services:</p> <ul> <li><strong>Commerce.gov</strong></li> <li><strong>vqwt.its.bldrdoc.gov/video-quality.php</strong></li> <li><strong>ncp.nist.gov</strong></li> </ul> <p>Any service not expressly listed above, such as any connected services, DOC Bureau sub-domains, or third-party sites or services are excluded from scope and are not authorized for testing.</p> <p>Though the DOC develops and maintains other internet-accessible systems or services, we ask that active research and testing be conducted only on the systems and services covered by the scope of this document. We will increase the scope of this policy over time. This policy applies to anyone wishing to conduct vulnerability discovery activities, including research and testing.</p> <p>If there is uncertainty regarding the scope, please contact <a href="https://web.archive.org/web/20220603012400/mailto:VulnerabilityDisclosure@doc.gov" rel="noreferrer">VulnerabilityDisclosure@doc.gov</a>.</p> <p>Additionally, vulnerabilities found in systems from non-DOC entities are outside of this policy’s scope and should be reported directly to the non-DOC entity according to their disclosure policy. If there is uncertainty regarding the scope of a system, contact <a href="https://web.archive.org/web/20220603012400/mailto:VulnerabilityDisclosure@doc.gov" rel="noreferrer">VulnerabilityDisclosure@doc.gov</a>.</p> <p>While the DOC Office of the Chief Information Officer (OCIO) is responsible for the development and maintenance for various internet-accessible systems or services, research and testing should only be conducted on the systems and services covered by the scope of this policy. The scope of this policy is subject to change; please contact the <a href="https://web.archive.org/web/20220603012400/mailto:VulnerabilityDisclosure@doc.gov" rel="noreferrer">VulnerabilityDisclosure@doc.gov</a> if questions arise regarding systems not currently in scope.</p> <p><strong>Guidelines</strong></p> <p>Under this policy, “research” means activities in which you:</p> <ul> <li>Notify the DOC as soon as possible after the discovery of any real or potential security issue(s).</li> <li>Make every effort to avoid privacy violations, degradation of user experience, disruption to production systems, and destruction or manipulation of data.</li> <li>Only use exploits to the extent necessary to confirm a vulnerability’s presence. Do not use an exploit to compromise or exfiltrate data, establish persistent command line access, or use the exploit to pivot to other systems.</li> <li>Do not submit a high volume of low-quality reports.</li> </ul> <p><strong>Upon the discovery of a vulnerability or sensitive data (including personally identifiable information, financial information or proprietary information or trade secrets of any party):</strong></p> <ul> <li>ALL tests must be stopped.</li> <li>Notify DOC immediately.</li> <li>Do Not disclose this data to anyone.</li> </ul> <p><strong>Reporting a Vulnerability</strong></p> <p>Information submitted under this policy will be used for defensive purposes only. If discovered findings include new vulnerabilities that affect all users of a product or service and not solely the DOC, the DOC may share your report with the Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA), where it will be handled according to their coordinated vulnerability disclosure process. The DOC will not share your name or contact information without express permission.</p> <p>The DOC only accepts vulnerability reports at this form <a href="//web.archive.org/web/20220603012400/https://www.commerce.gov/form/doc-vulnerability-intake-form-" rel="noreferrer"><em>DOC Vulnerability Intake form</em></a>. Reports may be submitted anonymously. If contact information is shared, the DOC will acknowledge receipt of the information within three (3) business days.</p> <p>When submitting a vulnerability, the security researcher acknowledges that there is no expectation of payment and that any future pay claims against the U.S. Government related to the submission have been waived.</p> <p>When contact information is shared, the DOC commits to coordinating with the security researcher in a transparent and timely manner:</p> <ol> <li class="MsoBodyText">Within three (3) business days, the DOC will acknowledge that the report has been received.</li> <li class="MsoBodyText">Within (15) business days, the DOC will confirm the existence of the vulnerability and provide further discussion on findings, resolutions and/or issues or challenges that may delay resolution.</li> </ol> <p><strong>Policy</strong></p> <p><strong>Vulnerability Reports</strong></p> <p>To report identified vulnerabilities, security researchers must:</p> <ol> <li>Submit vulnerability reports to <a href="//web.archive.org/web/20220603012400/https://www.commerce.gov/form/doc-vulnerability-intake-form-" rel="noreferrer"><em>DOC Vulnerability Intake form</em></a></li> <li>Describe the location the vulnerability was discovered and the potential impact of exploitation.</li> <li>Offer a detailed description of the steps needed to reproduce the vulnerability (proof of concept scripts or screenshots).</li> <li>Submit vulnerability reports, anonymously, if desired. If a security researcher provides DOC with an email address, DOC will acknowledge, via email receipt of submitted reports within three (3) business days.</li> <li>Keep confidential any information about discovered vulnerabilities for up to (90) calendar days after being notified by the DOC.</li> </ol> <p><strong>Coordinated Disclosure</strong></p> <p>DOC is committed to patching vulnerabilities within (90) days or less and disclosing the details of those vulnerabilities when patches are published. We believe that public disclosure of vulnerabilities is an essential part of the vulnerability disclosure process, and that one of the best ways to make software better is to enable everyone to learn from each other’s mistakes.</p> <p>At the same time, we believe that disclosure in absence of a readily available patch tends to increase risk rather than reduce it, and so we ask that security researchers refrain from sharing reports with others, or releasing reports to the public, while patching is occurring. If there is a need to inform others of the submitted report before the patch is available, please coordinate with DOC at <a href="https://web.archive.org/web/20220603012400/mailto:VulnerabilityDisclosure@DOC.gov" rel="noreferrer">VulnerabilityDisclosure@DOC.gov</a> prior to release for assessment.</p> <p><strong>Use of Vulnerability Reports</strong></p> <p>Information submitted under this policy shall be used by the DOC for defensive cybersecurity purposes (i.e. to mitigate or remediate vulnerabilities). If an issue has been reported and determined to be both within the program scope and determined to be a valid security issue, the DOC will validate the finding(s) and the security researcher can disclose the vulnerability after a resolution has been issued. The details within the Vulnerability Intake form may be submitted to an independent third-party vendor for evaluation and handling</p> <p><strong>Information Sharing</strong></p> <p>Information submitted under this policy may be shared for defensive cybersecurity means:</p> <ol> <li>If findings submitted include newly discovered vulnerabilities that affect users of a product or service outside of the DOC, the DOC may share vulnerability reports with DHS CISA, where it will be handled under DHS CISA’s coordinated vulnerability disclosure process. The DOC retains the right to share this information with DHS CISA and other applicable organizations, as needed.</li> <li>Personal information pertinent to the security researcher will not be disclosed or shared without the researcher’s express written permission.</li> </ol> <p><strong>Testing Methods</strong></p> <p>The DOC requires that security researchers comply with authorized test methods to access systems within the publicly available DOC.gov domains, and not perform any unauthorized test methods.</p> <p><strong>Unauthorized Testing Methods</strong></p> <p>The following test methods are <strong>not authorized</strong> by the DOC:</p> <ol> <li>Test any systems other than the systems set forth in the ‘Scope’ of this policy.</li> <li>Physical testing of facilities or resources (e.g., office access, open doors, tailgating).</li> <li>Social engineering (e.g., phishing, vishing, spam, and other suspicious email), and any other non-technical vulnerability testing.</li> <li>Network denial of service (DoS or Distributed DoS) or tests that impair access to or damage availability to a system or data.</li> <li>Tests that exhausts bandwidth or are resource intensive.</li> <li>Unidentified malware, viruses, Trojan horses, or worms.</li> <li>Rainbow tables, password cracking, or brute force testing.</li> <li>Use an exploit to exfiltrate data, establish command line access, establish a persistent presence on DOC systems, or “pivot” to other DOC systems.</li> <li>Test third-party applications, websites, or services that integrate with or link to or from DOC systems.</li> <li>Delete, alter, share, retain, or destroy DOC data, or render DOC data inaccessible.</li> </ol> <p><strong>Questions</strong></p> <p>Questions or suggestions regarding this policy may be sent to <a href="https://web.archive.org/web/20220603012400/mailto:VulnerabilityDisclosure@DOC.gov" rel="noreferrer">VulnerabilityDisclosure@DOC.gov</a>.</p></div> </div> </article> </div> <div class="block block-social-media block-social-sharing-block"> <h2>Share this page</h2> <div class="social-media-sharing"> <ul class=""> <li> <a target="_blank" class="facebook-share share" href="https://web.archive.org/web/20220603012400/http://www.facebook.com/share.php?u=https://www.commerce.gov/vulnerability-disclosure-policy&title=Vulnerability Disclosure Policy " title="Facebook"> <img alt="Facebook" src="https://web.archive.org/web/20220603012400im_/https://www.commerce.gov/modules/contrib/social_media/icons/facebook_share.svg"> </a> </li> <li> <a target="_blank" class="facebook-msg share" onclick="FB.ui({method: 'send',link: 'https://web.archive.org/web/20220603012400/https://www.commerce.gov/vulnerability-disclosure-policy'})" title="Facebook messenger"> <img alt="Facebook messenger" src="https://web.archive.org/web/20220603012400im_/https://www.commerce.gov/modules/contrib/social_media/icons/facebook_msg.svg"> </a> </li> <li> <a target="_blank" class="linkedin share" href="https://web.archive.org/web/20220603012400/http://www.linkedin.com/shareArticle?mini=true&url=https://www.commerce.gov/vulnerability-disclosure-policy&title=Vulnerability Disclosure Policy &source=https://www.commerce.gov/vulnerability-disclosure-policy" title="Linkedin"> <img alt="Linkedin" src="https://web.archive.org/web/20220603012400im_/https://www.commerce.gov/modules/contrib/social_media/icons/linkedin.svg"> </a> </li> <li> <a target="_blank" class="twitter share" href="https://web.archive.org/web/20220603012400/https://twitter.com/intent/tweet?url=https://www.commerce.gov/vulnerability-disclosure-policy&via=CommerceGov&text=Vulnerability Disclosure Policy " title="Twitter"> <img alt="Twitter" src="https://web.archive.org/web/20220603012400im_/https://www.commerce.gov/modules/contrib/social_media/icons/twitter.svg"> </a> </li> <li> <a class="email share" href="https://web.archive.org/web/20220603012400/mailto:/?subject=Vulnerability Disclosure Policy &body=Check out this site https://www.commerce.gov/vulnerability-disclosure-policy" title="Email"> <img alt="Email" src="https://web.archive.org/web/20220603012400im_/https://www.commerce.gov/modules/contrib/social_media/icons/email.svg"> </a> </li> </ul> </div> </div> </div> </div> </div> </div> </main> <footer class="usa-footer usa-footer--big" role="contentinfo"> <div class="usa-grid usa-footer-return-to-top"> <a href="#">Return to top</a> </div> <div class="usa-footer__primary-section"> <div class="grid-container"> <div class="region region-footer-menu"> <div class="grid-row grid-gap"> <div class="mobile-lg:grid-col-6 desktop:grid-col-4"> <section class="usa-footer__primary-content usa-footer__primary-content--collapsible"> <h4 class="usa-footer__primary-link">Explore</h4> <ul class="usa-list usa-list--unstyled add-list-reset"> <li class="usa-footer__secondary-link"> <a href="/web/20220603012400/https://www.commerce.gov/issues" title="Issues" data-drupal-link-system-path="issues">Issues</a> </li> <li class="usa-footer__secondary-link"> <a href="/web/20220603012400/https://www.commerce.gov/news" title="News" data-drupal-link-system-path="news">News</a> </li> <li class="usa-footer__secondary-link"> <a href="/web/20220603012400/https://www.commerce.gov/data-and-reports" title="Data and reports" data-drupal-link-system-path="node/555">Data and reports</a> </li> <li class="usa-footer__secondary-link"> <a href="/web/20220603012400/https://www.commerce.gov/work-with-us" title="Work with us" data-drupal-link-system-path="node/556">Work with us</a> </li> </ul> </section> </div> <div class="mobile-lg:grid-col-6 desktop:grid-col-4"> <section class="usa-footer__primary-content usa-footer__primary-content--collapsible"> <h4 class="usa-footer__primary-link">About us</h4> <ul class="usa-list usa-list--unstyled add-list-reset"> <li class="usa-footer__secondary-link"> <a href="/web/20220603012400/https://www.commerce.gov/about" data-drupal-link-system-path="node/477">Our mission</a> </li> <li class="usa-footer__secondary-link"> <a href="/web/20220603012400/https://www.commerce.gov/about/strategic-plan" title="Department of Commerce's strategic plan" data-drupal-link-system-path="node/548">Strategic plan</a> </li> <li class="usa-footer__secondary-link"> <a href="/web/20220603012400/https://www.commerce.gov/bureaus-and-offices" title="Department of Commerce's bureaus and offices" data-drupal-link-system-path="bureaus-and-offices">Bureaus and offices</a> </li> <li class="usa-footer__secondary-link"> <a href="https://web.archive.org/web/20220603012400/http://www.osec.doc.gov/opog/privacy/default.html" title="Department of Commerce's privacy program" rel="noreferrer">Privacy program</a> </li> </ul> </section> </div> <div class="mobile-lg:grid-col-6 desktop:grid-col-4"> <section class="usa-footer__primary-content usa-footer__primary-content--collapsible"> <h4 class="usa-footer__primary-link">Get in touch</h4> <ul class="usa-list usa-list--unstyled add-list-reset"> <li class="usa-footer__secondary-link"> <a href="/web/20220603012400/https://www.commerce.gov/about/contact-us" data-drupal-link-system-path="node/483">Contact us</a> </li> <li class="usa-footer__secondary-link"> <a href="https://web.archive.org/web/20220603012400/https://staff.commerce.gov/" title="Staff directory" rel="noreferrer">Staff directory</a> </li> <li class="usa-footer__secondary-link"> <a href="https://web.archive.org/web/20220603012400/http://www.osec.doc.gov/opog/default.htm" title="Open government" rel="noreferrer">Open government</a> </li> <li class="usa-footer__secondary-link"> <a href="https://web.archive.org/web/20220603012400/http://www.osec.doc.gov/opog/FOIA/default.html" title="Freedom of Information Act" rel="noreferrer">FOIA</a> </li> </ul> </section> </div> </div> </div> </div> </div> </div> <div class="usa-footer__secondary-section"> <div class="grid-container"> <div class="grid-row grid-gap"> <div class="usa-footer__logo grid-row mobile-lg:grid-col-6 mobile-lg:grid-gap-2"> <div class="mobile-lg:grid-col-auto"> <a href="/web/20220603012400/https://www.commerce.gov/"> <img class="usa-footer__logo-img" src="/web/20220603012400im_/https://www.commerce.gov/themes/custom/commerce/assets/img/doc_logo.png" width="80" height="80" alt="Department of Commerce logo"/> </a> </div> <div class="mobile-lg:grid-col-auto"> <div class="footer-address"> 1401 Constitution Ave NW<br/> Washington, DC 20230 </div> </div> </div> <div class="usa-footer__contact-links mobile-lg:grid-col-6"> <div class="usa-footer__social-links grid-row"> <a href="https://web.archive.org/web/20220603012400/https://twitter.com/commercegov" aria-label="U. S. Department of Commerce Twitter page"> <span class="fa-layers fa-fw usa-social_link"> <i class="fas fa-square fa-2x" style="color:white" alt="Department of Commerce Twitter page" aria-label="Department of Commerce Twitter page"></i> <i title="Twitter" class="fab fa-twitter-square fa-2x" style="color:#1da1f2"></i> </span> </a> <a href="https://web.archive.org/web/20220603012400/https://www.facebook.com/Commercegov/" aria-label="U. S. Department of Commerce Facebook page"> <span class="fa-layers fa-fw usa-social_link"> <i class="fas fa-square fa-2x" style="color:white" alt="Department of Commerce Facebook page" aria-label="Department of Commerce Facebook page"></i> <i title="Facebook" class="fab fa-facebook-square fa-2x" style="color:#3b5998"></i> </span> </a> <a href="https://web.archive.org/web/20220603012400/https://www.linkedin.com/company/u-s--department-of-commerce" aria-label="Department of Commerce Linkedin page"> <span class="fa-layers fa-fw usa-social_link"> <i class="fas fa-square fa-2x" style="color:white" alt="Department of Commerce Linkedin page" aria-label="Department of Commerce Linkedin page"></i> <i title="LinkedIn" class="fab fa-linkedin fa-2x" style="color:#0077b5"></i> </span> </a> <a href="https://web.archive.org/web/20220603012400/https://www.youtube.com/channel/UCDk7XARReoJChTwu1WojgRQ" aria-label="U. S. Department of Commerce YouTube page"> <span class="fa-layers fa-fw usa-social_link"> <i class="fas fa-square fa-2x" style="color:white" alt="Department of Commerce YouTube page" aria-label="Department of Commerce YouTube page"></i> <i title="YouTube" class="fab fa-youtube-square fa-2x" style="color:#ff0000"></i> </span> </a> <a href="/web/20220603012400/https://www.commerce.gov/rss" aria-label="Department of Commerce rss feed"> <span class="fa-layers fa-fw usa-social_link"> <i class="fas fa-square fa-2x" style="color:white" alt="Department of Commerce rss feed" aria-label="Department of Commerce rss feed"></i> <i title="RSS" class="fas fa-rss-square fa-2x" style="color:#ffA500"></i> </span> </a> </div> </div> </div> <div class="grid-row grid-gap"> <div class="mobile-lg:grid-col-12"> <div class="region region-footer-secondary"> <ol class="dotsbetween"> <li> <a href="/web/20220603012400/https://www.commerce.gov/archives">Archives</a> </li> <li> <a href="/web/20220603012400/https://www.commerce.gov/about/policies/accessibility">Accessibility</a> </li> <li> <a href="https://web.archive.org/web/20220603012400/http://www.osec.doc.gov/ofm/OFM_Publications.html">Agency Financial Report</a> </li> <li> <a href="/web/20220603012400/https://www.commerce.gov/about/policies/comments">Comment policy</a> </li> <li> <a href="/web/20220603012400/https://www.commerce.gov/digitalstrategy">Digital strategy</a> </li> <li> <a href="/web/20220603012400/https://www.commerce.gov/about/policies/information-quality">Information quality</a> </li> <li> <a href="/web/20220603012400/https://www.commerce.gov/cr/reports-and-resources/no-fear-act">No Fear Act</a> </li> <li> <a href="https://web.archive.org/web/20220603012400/https://www.oig.doc.gov/">Inspector General</a> </li> <li> <a href="/web/20220603012400/https://www.commerce.gov/about/policies/plain-language">Plain language</a> </li> <li> <a href="/web/20220603012400/https://www.commerce.gov/about/policies/privacy">Privacy policy</a> </li> <li> <a href="https://web.archive.org/web/20220603012400/https://www.commerce.gov/ofm/payment-integrity/department-commerce-payment-integrity-website">Payment Integrity</a> </li> <li> <a href="https://web.archive.org/web/20220603012400/https://www.usa.gov/">USA.gov</a> </li> <li> <a href="/web/20220603012400/https://www.commerce.gov/vulnerability-disclosure-policy">Vulnerability Disclosure Policy</a> </li> <li> <a href="https://web.archive.org/web/20220603012400/https://www.oig.doc.gov/Pages/Hotline.aspx">Whistleblower Protection</a> </li> <li> <a href="https://web.archive.org/web/20220603012400/https://www.whitehouse.gov/">WhiteHouse.gov</a> </li> </ol> <div id="block-govdeliverysignup-fixed-block" class="block block-fixed-block-content block-fixed-block-contentgovdelivery-sign-up-fixed-block"> <div class="clearfix text-formatted field field--name-body field--type-text-with-summary field--label-hidden field__item"><form accept-charset="UTF-8" action="https://web.archive.org/web/20220603012400/https://public.govdelivery.com/accounts/USDOC/subscribers/qualify" id="GD-snippet-form" method="post"><input name="utf8" type="hidden" value="✓"/><input name="authenticity_token" type="hidden" value="KYi9hmgKqvcMOKf453K61tlo2i3pCo8sVKFUH73sfXB1gecwmSLcalxpsqf6Vj4zDIv5vztIijVjsn5SGnDrfw=="/> <fieldset><legend> Sign up for email updates </legend> <div> <p>To sign up for updates or to access your subscriber preferences, please enter your contact information below.</p> </div> <ol class="form"> <li class="email_fields" style="display: block"><label for="email"><img alt="Required" class="required" src="https://web.archive.org/web/20220603012400im_/https://content.govdelivery.com/images/required.gif"/>Email Address</label> <input class="long" id="email" name="email" type="text"/></li> </ol> <div class="button_panel"><input class="form-button usa-button" name="commit" type="submit" value="Subscribe"/></div> </fieldset> </form> </div> </div> </div> </div> </div> </div> </div> </footer> </div> <script type="application/json" data-drupal-selector="drupal-settings-json">{"path":{"baseUrl":"\/","scriptPath":null,"pathPrefix":"","currentPath":"node\/3454","currentPathIsAdmin":false,"isFront":false,"currentLanguage":"en","currentQuery":{"q":"\/vulnerability-disclosure-policy"}},"pluralDelimiter":"\u0003","suppressDeprecationErrors":true,"ajaxPageState":{"libraries":"back_to_top\/back_to_top_icon,back_to_top\/back_to_top_js,classy\/base,classy\/messages,commerce\/accessibility,commerce\/digital_analytics_program,commerce\/footer,commerce\/govdelivery,commerce\/header,commerce\/openid_connect,commerce\/uswds,core\/drupal.dialog.ajax,core\/normalize,extlink\/drupal.extlink,fontawesome\/fontawesome.svg,fontawesome\/fontawesome.svg.shim,google_analytics\/google_analytics,social_media\/basic,social_media\/facebook,system\/base,uswds\/drupal,uswds\/footer,uswds\/header,uswds\/uswds","theme":"commerce","theme_token":null},"ajaxTrustedUrl":[],"back_to_top":{"back_to_top_button_trigger":100,"back_to_top_prevent_on_mobile":false,"back_to_top_prevent_in_admin":false,"back_to_top_button_type":"image","back_to_top_button_text":"Back to top"},"google_analytics":{"trackOutbound":true,"trackMailto":true,"trackDownload":true,"trackDownloadExtensions":"7z|aac|arc|arj|asf|asx|avi|bin|csv|doc(x|m)?|dot(x|m)?|exe|flv|gif|gz|gzip|hqx|jar|jpe?g|js|mp(2|3|4|e?g)|mov(ie)?|msi|msp|pdf|phps|png|ppt(x|m)?|pot(x|m)?|pps(x|m)?|ppam|sld(x|m)?|thmx|qtm?|ra(m|r)?|sea|sit|tar|tgz|torrent|txt|wav|wma|wmv|wpd|xls(x|m|b)?|xlt(x|m)|xlam|xml|z|zip"},"data":{"extlink":{"extTarget":true,"extTargetNoOverride":false,"extNofollow":false,"extNoreferrer":false,"extFollowNoOverride":false,"extClass":"ext","extLabel":"(link is external)","extImgClass":false,"extSubdomains":true,"extExclude":".\\.gov","extInclude":"https:\/\/web.archive.org\/web\/20220603012400\/https:\/\/connection.commerce.gov\/*","extCssExclude":".usa-footer-contact-links a","extCssExplicit":"","extAlert":false,"extAlertText":"This link will take you to an external web site. We are not responsible for their content.","mailtoClass":"mailto","mailtoLabel":"(link sends email)","extUseFontAwesome":false,"extIconPlacement":"append","extFaLinkClasses":"fa fa-external-link","extFaMailtoClasses":"fa fa-envelope-o","whitelistedDomains":[]}},"social_media":{"application_id":"Your Application ID"},"user":{"uid":0,"permissionsHash":"e9a22412fbff4b4af13117b9144b0dd2d0e2af631e1c0e8982e0e8845f07503d"}}</script> <script src="/web/20220603012400js_/https://www.commerce.gov/sites/default/files/js/js_zVFk5fgkZpvKooILZ0QtSuXNpSiMSJIyAxoI1VQFfnI.js"></script> <script src="/web/20220603012400js_/https://www.commerce.gov/sites/default/files/js/js__DQk-nOk15EjAZl9gHgRUQBSPdTeW9lsCkLnVtHYdE8.js"></script> <script src="/web/20220603012400js_/https://www.commerce.gov/sites/default/files/js/js_x1CWozf5lNDu0db4ZcT3W-gBeKqsVOdvD_wWDpY1N4Y.js"></script> <script src="//web.archive.org/web/20220603012400js_/https://content.govdelivery.com/overlay/js/1374.js"></script> <script src="//web.archive.org/web/20220603012400js_/https://dap.digitalgov.gov/Universal-Federated-Analytics-Min.js?agency=DOC" id="_fed_an_ua_tag"></script> <script src="/web/20220603012400js_/https://www.commerce.gov/sites/default/files/js/js_ziSnwk950Wu3AAfLhZQERCwWH8xSMyzIBLFqmwhtZuM.js"></script> </body> </html>

CINXE.COM

Vulnerability Disclosure Policy | U.S. Department of Commerce