Aspen Policy Academy

New Project: Agency Readiness for Bug Bounty Programs

  • Article Published November 17, 2022

We are pleased to share an exciting new project from our inaugural Tech Policy Primer cohort. The project, focused on ‘Agency Readiness for Bug Bounty Programs,’ proposes guidelines for the Cybersecurity and Infrastructure Security Agency (CISA) to scale the use of Bug Bounty Programs (BBPs) across government. The outputs include a BBPs 101 information sheet, a BBP readiness score guide and scorecard, and a BBP Survey Tool demo video.

Read more about the project:

Agency Readiness for Bug Bounty Programs

by Ahmed Amer, Di Cooke, Rob Lever, and Julia Pan

BBPs are an efficient and cost-effective way to improve a system’s security, allowing for scrutiny by a broader array of cybersecurity experts than a typical government agency could normally provide. Yet, few agency system stakeholders understand the advantages of BBPs or are prepared to execute BBPs on their own systems. This project outlines how CISA could help agencies: improve their understanding of BBPs; gauge their specific agency’s readiness to execute a BBP; and assist with preparation if an agency is not yet ready to execute a BBP.

Learn more about this and other projects here.

Browse Related Articles

Introducing the 2026 Tech Executive Leadership Initiative Cohort

Over the last 4 weeks, these Leaders have developed the policy skills to tackle Medicaid service delivery challenges.

Overcoming NIMBYism: How Santa Fe Plans To Build Support For Pallet Shelters

This article originally appeared on Invisible People on October 8, 2025.

Utah Adopts Fellows’ AI Evaluation Recommendations

Learn how a project developed by our Science and Technology Policy Fellows has influenced Utah’s AI policy.