Secure Controls Framework

1,534 controls across 34 domains

Source: SCF 2026.2About SCF

THR-06THRThreat Management

Vulnerability Disclosure Program (VDP)

Description

Mechanisms exist to establish a Vulnerability Disclosure Program (VDP) to assist with the secure development and maintenance of Technology Assets, Applications and/or Services (TAAS) that receives unsolicited input from the public about vulnerabilities in organizational TAAS.

Cross-Mappings

2 paths across 2 frameworks

NIST 800-531 mapping

RA-5(11)

1.00

Secure Controls Framework · 2026.2 · scf_strm · equivalent

CCI1 mapping

CCI-004640

1.00

Secure Controls Framework · 2026.2 · scf_strm · equivalent
DISA · 2025-01-23 · disa_cci_list · equivalent

Control mappings provided by the Secure Controls Framework (SCF).

Previous in THRTHR-05Insider Threat Awareness

Next in THRTHR-06.1Security Disclosure Contact Information

SCF

Powered by the Secure Controls Framework

The control catalog, cross-mappings, and STRM relationship data shown here are provided by the Secure Controls Framework (SCF), 2026.2. Every mapping is credited to SCF as the methodology, with the SCF reference and version stored alongside it.