15 U.S.C. § 278g–3d — Implementation of coordinated disclosure of security vulnerabilities relating to agency information systems, including Internet of Things devices

(a) Agency guidelines required: Within 2 years of December 4, 2020, the Director of OMB, working with the Secretary, had to create and oversee policies, standards, or guidelines needed to handle security vulnerabilities in information systems, including IoT devices. (b) Operational and technical assistance: Consistent with section 3553(b) of title 44, the Secretary, working with OMB's Director, must give agencies operational and technical help with reporting, coordinating, publishing, and receiving vulnerability information about information systems, including IoT devices. (c) Consistency with guidelines from National Institute of Standards and Technology: The Secretary must make sure this help matches the applicable standards and publications the Institute's Director has developed. (d) Revision of Federal Acquisition Regulation: The Federal Acquisition Regulation must be revised as needed to carry out this section.