Establishing a Coordinated Vulnerability Disclosure Program to Work With Security Researchers

The CISA, NSA, and international partners have jointly released guidance to help software companies and online services establish effective Coordinated Vulnerability Disclosure (CVD) programs. This program focuses on collaborating with security researchers to identify, fix, and responsibly disclose vulnerabilities, ult…