As part of a U.S. government agency, the Railroad Retirement Board (RRB) takes seriously our responsibility to protect the railroad public's information, including financial and personal information, from unwarranted disclosure. A part of this responsibility is allowing security researchers to seek vulnerabilities in the RRB’s systems that support the mission of the agency.
We want security researchers to feel comfortable reporting vulnerabilities they've discovered, as set out in this policy, so that we can fix them and keep our information safe.