“The purpose of a responsible disclosure policy is to get information out as quickly as possible to minimize risk,” said Daniel Castro on Federal News Radio.