Feb 19, 2025 · This policy describes what systems and types of research are covered under this policy, how to report the vulnerability, how long VA asks security researchers to wait before publicly …

4 days ago · The VHA Policy Office maintains the content. For any questions, please email the Policy Team: [email protected]. Most documents are available in PDF format. Download Viewer …

The vendor shall notify VA within 24 hours of the discovery or disclosure of successful exploits of the vulnerability which can compromise the security of the Systems (including the confidentiality or …

VA.gov ChooseVA DiscoverVA DigitalVA VA Outreach Events VA Forms VA Publications About VA VA mobile apps Accessibility at VA No FEAR Act data Whistleblower Protection Office of the Inspector …

Oct 8, 2025 · EPD conducts ongoing threat and vulnerability assessments for the Secretary and Deputy Secretary to include assessments of their official staff suites, residences, and travel locations.

Policy and procedures will be established to ensure that requirements for the protection of Controlled Unclassified Information (CUI) processed, stored, or transmitted on external systems are …

UPDATE TO VA DIRECTIVE 6500 VA CYBERSECURITY PROGRAM PURPOSE: This notice revises the policy in Department of Veterans Affairs (VA) Directive 6500 to address new security …

The vendor shall notify VA within 24 hours of the discovery or disclosure of successful exploits of the vulnerability which (including the confidentiality or integrity of its data and operations, or the …

Cybersecurity risk management involves properly assessing the risk and making an informed decision on how to address the threat or vulnerability. The Department cannot aford to blindly accept the risk …

An official website of the U.S. Department of Veterans Affairs About VA Accessibility support No FEAR Act data Whistleblower Protection Office of the Inspector General Performance reports Privacy policy …