Official websites do not use .rip
A .gov website belongs to an official government organization in the United States.

We are building a provable archive!
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Projects Vulnerability Disclosure Guidelines

Vulnerability Disclosure Guidelines

ISO/IEC 29147 and 30111

NIST SP 800-216, Recommendations for Federal Vulnerability Disclosure Guidelines, is based on the policies and processes shown in the figure below. Minimal changes have been made to support vulnerability management at the local and federal levels.

Chart displaying how ISO/IEC 29147 and ISO/IEC 30111 work together to form the basis of addressing vulnerability disclosures.

Contacts

Vulnerability Disclosure Inquiries
sp800-216-comments@nist.gov

Created February 04, 2021, Updated April 22, 2025