Private Sector

/audience/private-sector

Good Practice Guide on Vulnerability Disclosure. From challenges to recommendations

Back to all publications

Publication date:January 18, 2016

The vulnerability disclosure landscape is complex, with several stakeholders involved that include vendors, IT security providers, independent researchers, the media, malicious users, governments and, ultimately, the general public. These stakeholders often have competing interests, which results in a challenging landscape.
In the specific context of the vulnerability disclosure process, this study seeks to achieve the following primary objectives: