diff --git a/baseline/OSPS-VM.yaml b/baseline/OSPS-VM.yaml
index b12969d6..8aa980af 100644
--- a/baseline/OSPS-VM.yaml
+++ b/baseline/OSPS-VM.yaml
@@ -20,9 +20,8 @@ controls:
     assessment-requirements:
       - id: OSPS-VM-01.01
         text: |
-          The project documentation MUST
-          include a policy for coordinated vulnerability disclosure (CVD), with a clear
-          timeframe for response.
+          The project documentation MUST include a coordinated vulnerability
+          disclosure (CVD) policy.
         applicability:
           - maturity-2
           - maturity-3
@@ -30,7 +29,8 @@ controls:
           Create a SECURITY.md file at the root of the directory, outlining the
           project's policy for coordinated vulnerability disclosure. Include a
           method for reporting vulnerabilities. Set expectations for how the
-          project will respond and address reported issues.
+          project will respond and address reported issues, including a clear
+          timeframe for responding to vulnerability reports.
 
   - id: OSPS-VM-02
     title: |