DoDI 8531.01 国防部漏洞管理.pdf

DOD INSTRUCTION 8531.01 DOD VULNERABILITY MANAGEMENT Originating Component:Office of the DoD Chief Information Officer Effective:September 15,2020 Releasability:Cleared for public release.Available on the Directives Division Website at https:/www.esd.whs.mil/DD/.Approved by:Dana Deasy,DoD Chief Information Officer Purpose:In accordance with the authority in DoD Directive 5144.02,this issuance:Establishes policy,assigns responsibilities,and provides procedures for DoD vulnerability management and response to vulnerabilities identified in all software,firmware,and hardware within the DoD information network(DODIN).Establishes a uniform DoD Component-level cybersecurity vulnerability management program based on federal and DoD standards.Establishes policy and assigns responsibilities for the DoD Vulnerability Disclosure Program(VDP).Establishes policy,assigns responsibilities,and provides procedures for DoDs participation in the Vulnerabilities Equities Process(VEP),in accordance with the Vulnerabilities Equities Policy and Process for the U.S.Government(USG).