Public Policy
Securing Our Elections Through Vulnerability Testing and Disclosure
Learn how security researchers are securing election technology though vulnerability testing and disclosure.
Public Policy,
Security Compliance
GUEST BLOG: Governments Across The World Are Mandating Vulnerability Disclosure So Why Are Companies Sitting On Their Hands?
May 24th, 2023
The IoT Security Foundation’s fifth annual report into the state of vulnerability disclosure consumer Internet...
Public Policy,
Security Compliance
FDA's New Cybersecurity Requirements: Are You Prepared as a Medical Device Manufacturer?
May 12th, 2023
Where To Begin? Companies submitting products for FDA approval must do the following: Provide details of their...
Public Policy,
Security Compliance
HackerOne Responds To The Review of The UK’s Computer Misuse Act (CMA)
April 19th, 2023
By Ilona Cohen, Chief Policy Officer, and Michael Woolslayer, Policy Counsel The U.K. is in the midst of a...
Public Policy,
Security Compliance
Cyber Regulations Can Make Our Nation Safer
March 29th, 2023
While a largely voluntary approach to critical infrastructure cybersecurity has led to some improvements, a...
Public Policy,
Security Compliance
How Human Security Testing Helps the U.S. Government’s Zero Trust Mandate
January 9th, 2023
One major reason for the progress is a May 2021 Executive Order that pushes federal agencies to speedily...
Get the latest news and insights beamed directly to you
Ethical Hacker,
Expert Interviews,
HackerOne Community Blog,
Public Policy
Calling All “Bureaucracy Hackers”
March 5th, 2018
Lisa Wiswell, a HackerOne advisor and a principal at GRIMM cybersecurity firm, thinks the government needs...
Policy Comments
When regulators have questions about policies and standards around the world, HackerOne has the answers.
- November 14, 2024: HackerOne Letter to the UN Convention Against Cybercrime
- September 9, 2024: HackerOne Comments on NIST AI 800-1 Managing the Risk of Misuse
- August 9, 2024: UK Call for Views on the Cyber Security of AI Comments
- August 9, 2024: UK Code of Practice for Software Vendors Comments
- June 28, 2024: HackerOne Comments on Implementing the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA)
- May 29, 2024: HackerOne Applauds Senator Warner’s Support for Legal Protection of AI Red Teaming
- April 29, 2024: HackerOne Response to OMB AI RFI
- April 16, 2024: Request for DOJ to Develop a Charging Policy under the CFAA to Protect Independent AI
Trustworthiness Research - March 18, 2024: Comment in Support of a DMCA Exemption for GenAI Research
- February 5, 2024: HackerOne NY Hospital Cybersecurity Requirements Comments
- February 2, 2024: Comments on NIST RFI on Artificial Intelligence Executive Order
- February 2, 2024: Comments on Cybersecurity for Unclassified Federal Information Systems (FAR Case 2021-019)
- February 2, 2024: Comments on Federal Contractor Cybersecurity (FAR Case 2021-017)
- April 6, 2023: Response to UK Computer Misuse Act Consultation
- June 23, 2023: Response to CISA Secure Software Attestation Form
- July 12, 2023: Response to NIST 800-171r3 Draft
- November 6, 2023: Comments to NIST CSF 2.0 Public Draft
- December 21, 2023: Comments on DMCA Section 1201 Generative AI Research
- March 19, 2022: Comments on UK DCMS Cyber Profession Pathway
- July 7, 2022: Comments on FDA Cybersecurity in Medical Devices
- December 14, 2022: Comments on Cyber Requirements for Federal Insurance
- June 08, 2021: Response to UK Computer Misuse Act Call for Information
- September 3, 2020: Proposals for Regulating Consumer Smart Product Cyber Security
- September 10, 2020: Comments on NIST SP 800-53B
External Press
New hacker advocacy group seeks to protect work of security researchers
Cyber regulations can make our nation safer
The Role of Regulation in Comprehensive Cybersecurity
A new hackathon is helping to make elections more secure
Cybersecurity firms to launch legal support fund, advocacy group for ethical hackers
CISA releases HBOM framework for supply chain risk management