Objectives

Update Section for Security Issue Resolution in Self Assessment

Guidance from Tag Security (from the template)

"An outline of the project's responsible
disclosures process should suspected security issues, incidents, or
vulnerabilities be discovered both external and internal to the project. The
outline should discuss communication methods/strategies."

"Who is responsible for responding to a
report. What is the reporting process? How would you respond?"

Resources

Security policy

Completion Criteria

• Add Responsible Disclosure Processes section
• Add Vulnerability Response Processes section