Guidelines and Practices for Multi-Party Vulnerability Coordination and Disclosure

Jurisdiction
International / Standards Bodies
Region
International
Requirement
Recommended
Organization
FIRST - Forum of Incident Response and Security Teams
Provision
N/A
Applies to
Vendors
Date
Spring 2020
Description
Provides "Guiding Concepts and Best Current Practices" related to multi-lateral coordination on CVDs: 1. Establish a strong foundation of processes and relationships 2. Maintain clear and consistent communications 3. Build and maintain trust 4. Minimize exposure for stakeholders 5. Respond quickly to early disclosure 6. Use coordinators when appropriate