EBMS Tickets

To comply with the Department’s Vulnerability Disclosure Policy (VDP), all public-facing NCI websites/web applications need to add an “HHS Vulnerability Disclosure” link in the footer. The deadline for implementation is the end of May, 2022. All NIH public websites and domains are being tested to ensure they are secure and resistant to most known web attacks and techniques. To ensure we meet the May deadline, please add the link now, even if you have not been notified that your site has been scanned. Please email the NCI Cyber Security Branch Governance Team with the name of the site or application once you have added the link to your site, or if you have questions. For information on where to put the link, the correct link text, and URL to link to, see page 3 of the NCI Digital Style Guide posted on myNCI.

It has been determined that the EBMS is a "public-facing website" (even though only the login page can be reached by those who are not registered, authenticated users.