Page History

...

In recent years the CERT/CC has advised a number of organizations on their vulnerability disclosure policies. In the interest of helping others develop or improve their own policies, we've these collected policy items from a variety of vulnerability disclosure policies including our own, generalized them, organized them by topic, and put them into a git repository. The policy templates in this repository are meant to be remixed and adapted for different organizations and contexts. It is unlikely that any single organization would choose to adopt all off these items wholesale without some modification.

...