Add new security section to req links page

[RachelF]

URL / Link to page

Update https://digital.gov/resources/required-web-content-and-links/?dg

Tell us how we can make this page better

DHS issued a new binding operational directive in Sept 2020 requiring agencies to create a new agency.gov/vulnerability-disclosure-policy page.
We'll need to add guidance for agencies on how to implement this directive.

The DHS BOD 20-01 page (https://cyber.dhs.gov/bod/20-01/) contains the implementation instructions.

Also coordinate w/USWDS team so they can update the Identifier component.

[RachelF]

Security

Agencies must have a way for the public to report potential security vulnerabilities, and explain how the agency will respond to such reports.

• Ensure your site's Security Contact and Organization are current in the .gov registrar
• Publish a vulnerability disclosure policy at [agency].gov/vulnerability-disclosure-policy

Suggested link text:

• Vulnerability Disclosure Policy

Required on:

• Your website policies page

Required by:

• Department of Homeland Security (DHS) Binding Operational Directive 20-01

POLICY
DHS Binding Operational Directive 20-01

[RachelF]

@saracope @ToniBonittoGSA Sorry, I forgot to tag you when I originally opened this. We need to add a new section to the Req Links page. Feel free to edit what I've suggested and let me know if you need anything else.

[afeijoo]

LGTM