The Benefits of a VDR Update
VDRs are a reliable and secure method to share information and review it in a collaborative, easy-to-use environment. They can also aid organizations comply with privacy regulations such as GDPR and CCPA.
The suggestion that software consumers receive a VDR is growing in popularity. The latest SPDX SBOM version 2.3 includes provisions (K.1.9) that give a software vendor the ability to connect with a VDR certification from NIST with their product with an SBOM. This makes the VDR „living“ within the SBOM. The NIST VDR attestation can be linked in a variety of ways, including via URL, using the CycloneDX SBOM standard of OWASP (which allows both VDR and VEX) as well as direct links to other sources of vulnerability management data such as GitHub repositories and public feeds.
For example, airlines have used Flight Data Recorders (FDR) for many years to reduce the number of crashes on aircrafts and save lives. VDRs have similar benefits, and the analysis of resulting data can improve security.
VDRs are used in many different ways by companies but they are frequently used in M&A transactions in which both parties conduct due diligence while negotiations take place. They can also be used to share sensitive information during the course of projects, like pharmaceutical research and development or clinical trial results. AES encryption can increase the security of the VDR. This is the highest level of encryption currently available and is widely used by government agencies, banks and online banking.
