richardk/iso27diy-corp
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Cleaned up Literature folder

Browse source
This commit is contained in:
Richard Kranendonk 2026-05-18 12:48:01 +02:00
parent 73a6380034
commit fe5eda4e05
586 changed files with 53911 additions and 2475 deletions
Download patch file Download diff file Expand all files Collapse all files

5
Corpus/ISMS/Policy examples/Vulnerability Disclosure Policy.md Normal file
View file

@ -0,0 +1,5 @@
Having a permissive vulnerability disclosure policy (VDP) encourages security research, and is a key characteristic of a good, mature security program. It encourages transparency.
For you as a vendor, it enhances [Vendor security MoC](../Vendor%20security%20MoC.md) towards your customers.
As a customer, you may check for a VDP when creatingyour [Examples of vendor selection questionnaires](../../Information%20Security/Examples%20of%20vendor%20selection%20questionnaires.md).