A vulnerability disclosure program is implemented to assist with the secure development and maintenance of products and services.
Topic
Vulnerability disclosure program
Applicable to
Non Classified, Official, Protected, Secret, Top Secret
History
Aug 2020
A vulnerability disclosure program is implemented as part of the secure development and maintenance of products and services.
Security control 1616 was introduced to recommend the use of a vulnerability disclosure program to assist with the security development and maintenance of products and services.