VINCE Code of Conduct
To inform and guide our day-to-day actions and interactions, we have created a code-of-conduct and defined behaviors we support (and don’t support) in our coordinated vulnerability disclosure practice. This is paramount because successful vulnerability coordination requires an open exchange of ideas. Open exchange is only possible in an inclusive environment that fosters trust, dignity, understanding, and mutual respect, and where participants recognize the inherent worth of every person and group.
Expectations
- All VINCE users are to follow this code of conduct.
- All VINCE users are to act and interact in ways that contribute to an open, welcoming, diverse, inclusive, and healthy community.
- We do not tolerate any form of harassment or offensive behavior in the context of our coordinated vulnerability disclosure practice, which includes the VINCE platform.
- Any offenders who are asked to stop their harassing behavior must comply immediately.
- If a VINCE user engages in harassing behavior, the offender may be suspended from further participation in the VINCE platform.
Harassment, in any form, is never appropriate and we pledge to make participation in our community a harassment-free experience for everyone. In particular, we will not tolerate harassment that targets persons or groups based on attributes including but not limited to: age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, religion, or sexual identity and orientation.
Harassment includes, but is not limited to
- The use of sexualized language or imagery, and sexual attention or advances of any kind
- Trolling, insulting or derogatory comments, and personal or political attacks
- Public or private harassment
- Publishing others' private information, such as a physical or email address, without their explicit permission
- Other conduct which could reasonably be considered inappropriate in a professional setting
A harassment free environment can be achieved when we adopt the following principles in our day-to-day actions and interactions.
Principle | Outcomes | So that we |
Trust one another | Work better and smarter individually and together and feel better about the work we do, how we do it, where we do it, and for whom we do it. |
|
Respect one another | Feel valued and supported, recognized, and energized to contribute our best at work. |
|
Be Civil | Create and sustain positive experiences that build a safe and supportive environment. |
|
Be Inclusive | Foster a sense of belonging, of giving and receiving respect, of enhanced self-esteem, of recognition and acceptance, and of supportive energy and commitment from leaders, colleagues and others. |
|
Tips to Guide Daily Actions and Interactions
- Self-monitor the respect that you display in all areas of your communications.
- Before acting, consider the impact of your actions, words, tone, and expressions on others.
- "Each one influence one” by becoming a bridge builder and role model for civility and respect.
- Act in a manner whereby you respect yourself, demonstrate respect for others, and take advantage of every opportunity to be proactive in promoting civility and respect.
- Take responsibility for your actions and practice self-restraint in responding to potential conflicts.
- Extending trust to individuals with the expectation of receiving that same trust.
- Communicating effectively which means being transparent, when possible, and ensuring that communication strategies meet the context.
- Interacting with mutual respect and keeping positive communication at the forefront of every interaction.
- Relying on facts rather than assumptions.
- Gathering relevant facts, especially before acting on assumptions that can damage relationships.
- Working collaboratively, finding common ground and common goals.
- Conducting technical discourse that is professional, productive, and focuses on the work or problem, not on the individual.
- Listening to what others have to say before expressing your viewpoint or cut off another person.
Scope
This Code of Conduct applies across the VINCE platform, however we expect and encourage respectful and non-harassing behavior from all parties we engage with.
Reporting abuse
Instances of harassment may be reported to the CERT/CC using the private message to CERT/CC mechanism within VINCE. All complaints will be reviewed and investigated promptly and fairly.
Instructions for using the private message feature of VINCE can be found here.
All CERT/CC analysts are obligated to respect the privacy and security of the reporter of any incident.