1. Short title This Act may be cited as the Public-Private Cybersecurity Cooperation Act . 2. Department of Homeland Security disclosure of security vulnerabilities (a) Definitions In this section: (1) Appropriate information system The term appropriate information system means an information system that the Secretary of Homeland Security selects for inclusion under the vulnerability disclosure policy required by subsection (b). (2) Department The term Department means the Department of Homeland Security. (3) Information system The term information system has the meaning given that term by section 3502(12) of title 44, United States Code. (4) Secretary The term Secretary means the Secretary of Homeland Security. (5) Security vulnerability The term security vulnerability has the meaning given that term in section 102(17) of the Cybersecurity Information Sharing Act of 2015 ( 6 U.S.C. 1501(17) ), in information technology. (b) Vulnerability disclosure policy The Secretary shall establish a policy applicable to individuals, organizations, and companies that report security vul­ner­a­bil­i­ties on appropriate information systems of Department. Such policy shall include each of the following: (1) The appropriate information systems of the Department that individuals, organizations, and companies may use to discover and report security vulnerabilities on appropriate information systems. (2) The conditions and criteria under which individuals, organizations, and companies may operate to discover and report security vulnerabilities. (3) How individuals, organizations, and companies may disclose to the Department security vul­ner­a­bil­i­ties discovered on appropriate information systems of the Department. (4) The ways in which the Department may communicate with individuals, organizations, and companies that report security vulnerabilities. (5) The process the Department shall use for public disclosure of reported security vulnerabilities. (c) Remediation process The Secretary shall develop a process for the Department