Communicating with Specific Parties in VINCE
Communicating with CERT/CC
To facilitate efficiency during the coordination process, there are multiple ways to communicate with CERT/CC.
- Case Discussion: CERT/CC analysts are available within the Case Discussion for every vulnerability coordination case. To communicate with CERT/CC using the Case Discussion, navigate to the Case Discussion, scroll to the bottom of the page, and enter your message in the available text box. Note that any communications posted in the Case Discussion are visible to all participants in the case, including those who may be added to the case in the future.
- Private Message: You can send a Private Message to CERT/CC by {insert specific instructions}. Private Messages will be seen only by CERT/CC analysts. Note that any replies sent from CERT/CC will be visible to the recipient and any VINCE users associated with the recipient's organization (in the case of vendors).
- Comment on Vulnerability Reporting Form (VRF): Reporters are able to communicate with CERT/CC by navigating to {insert specific instructions} and entering a message in the text box at the bottom of the VRF. Note that this method of communication is available only:
- before the VRF has been converted to a VU# for coordination (at which point the Case Discussion should be used); or
- when the reporter wishes to avoid participating in the Case Discussion.
Communicating with Vendors
- Case Discussion:
Communicating with Reporters
- Case Discussion:
Case discussion (pinned topic, discussion, who is in the room, case history)
VINCEComm ticket comms – what is this called? activity on a ticket, specifically a VRF ticket allows CERT/CC to talk to a reporter who is a VINCE user, called message? activity on case?
inbox – message thread, not a ticket?
PM with CERT/CC - other "send message to CERT/CC" options, inbox > new message
Private thread
For vendors
Receive notification from CERT/CC on new vul report
Providing vendor status