Vulnerability Disclosure Process

Create a vulnerability disclosure process.

Org type: {{size_product_type}}
Regulatory requirements: {{soc_2_iso_27001_gdpr}}
Security team: {{who_handles_incidents}}
Current process: {{describe_if_any}}

Please design:
1. How to receive reports (email / form / bug bounty)
2. Triage: severity classification with examples (Critical / High / Medium / Low)
3. Response SLAs per severity
4. Communication to reporter: what to say and when
5. Internal escalation by severity
6. Remediation tracking
7. A template acknowledgement email for initial response

Copied to clipboard.