Governance Risk Compliance
脆弱性開示
The process by which security vulnerabilities are reported to the relevant organization, vendor, or public, typically following a responsible or coordinated disclosure protocol.
Quick answer: The process by which security vulnerabilities are reported to the relevant organization, vendor, or public, typically following a responsible or coordinated disclosure protocol.
This term page is part of the Protermify Cybersecurity glossary and is published as static HTML for fast indexing and clear language coverage.
Definition
The process by which security vulnerabilities are reported to the relevant organization, vendor, or public, typically following a responsible or coordinated disclosure protocol.
Operational example
The organization established a vulnerability disclosure program to allow security researchers to safely report flaws.
Localized example
組織は、セキュリティ研究者が安全に脆弱性を報告できるよう脆弱性開示プログラムを導入しました。
Definition language
English reference definition
Source
ISO 27001, NIST Cybersecurity Framework, MITRE ATT&CK
Exam relevance
- CISSP
- CompTIA Security+
- CEH
Target audience
- SOC Analysts
- Security Engineers
- Incident Responders
