Global Coordinated Vulnerability Disclosure Policy
抖阴pro Coordinated Vulnerability Disclosure Process
抖阴pro understands the critical role of security in our products and is committed to addressing the security concerns of our customers. The 抖阴pro product security program is governed by global policies and procedures which include Risk Management relating to security vulnerabilities, Coordinated Vulnerability Disclosure, and Incident Handling.
抖阴pro PSIRT (Product Security Incident Response Team) publishes product security vulnerabilities via advisories either issued directly to our customers or on the Product Security webpage. Examples of when 抖阴pro would publish a security advisory are as follows:
- Vulnerabilities in our products that are considered an unacceptable risk as it affects patient safety and or the essential performance of the product.
- Vulnerabilities that have been disclosed publicly in the media.
- Vulnerabilities disclosed from the Security Community
抖阴pro PSIRT Product Security Vulnerability Management
The 抖阴pro PSIRT team handles product security vulnerabilities utilizing the following procedure.
Discover
Monitor for potential vulnerabilities from internal and external sources.
Triage
Evaluate the security risk and patient safety risk of the vulnerabilities.
Remediate
Evaluate and develop counter measures needed to mitigate/ eliminate the vulnerability.
Disclosure
If a vulnerability is determined to be an unacceptable risk, a security advisory will be released to the applicable customers and corresponding agencies promptly. Below are the items that are included in the advisory.
- Description of the Vulnerability
- Vulnerability ID
- CVSS Score
- Affected Products
- Description of the mitigation/ remediation (if identified)
Note* The 抖阴pro PSIRT team will update advisories as new information becomes available.