Charleston Reporter

Congresswoman Nancy Mace has reintroduced the Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025, aiming to address a significant gap in federal cybersecurity standards. This bipartisan bill mandates that both civilian and defense federal contractors implement vulnerability disclosure policies (VDPs).

The legislation, cosponsored by Representative Shontel Brown, extends existing requirements for federal agencies to federal contractors. VDPs offer a framework for researchers to report security vulnerabilities before they can be exploited, reducing the risk of cyberattacks on government contractors.

“This is a matter of national security,” stated Congresswoman Mace. “Federal contractors handle some of the most sensitive information and critical infrastructure in the country. Without basic vulnerability disclosure policies, we are leaving a gaping hole in our cybersecurity defenses.”

Congresswoman Brown emphasized the necessity of these measures: “Cybersecurity isn’t optional, it’s essential. To ensure that our systems are fully secure, we need to make sure federal contractors follow national guidelines.”

While federal agencies must already have VDPs, this requirement does not currently extend to federal contractors who manage substantial amounts of sensitive data. The proposed legislation aims to rectify this by mandating adherence to standards set by the National Institute of Standards and Technology (NIST).

Originally introduced last August by Congresswoman Mace and later supported in the Senate by Senators Mark Warner and James Lankford, the bill assigns oversight responsibilities to relevant bodies. The Office of Management and Budget will update acquisition regulations for civilian contractors, while the Secretary of Defense will ensure compliance among defense contractors.

This initiative is part of Congresswoman Mace's broader efforts to modernize and secure federal IT systems against cyber threats.

For further information, inquiries can be directed to SC01Press@mail.house.gov.