Corporate Compliance Insights – The National Institute of Standards and Technology’s new triage model changes the federal role in software vulnerability analysis, but it also clarifies organizations’ role in risk ownership, writes Nichole Windholz, CISO at Onspring. A federal database may list the vulnerability, but the organization has to decide what it means for them.

More at Corporate Compliance Insights