Cookies
Wir benötigen Ihre Einwilligung zur Verwendung der einzelnen Daten, damit Sie unter anderem Informationen zu Ihren Interessen einsehen können. Klicken Sie auf "OK", um Ihre Zustimmung zu erteilen.
ČSN EN ISO/IEC 29147 (369713)
Information technology - Security techniques - Vulnerability disclosure
Name übersetzen
NORM herausgegeben am 1.11.2020
Informationen über die Norm:
Bezeichnung normen: ČSN EN ISO/IEC 29147
Zeichen: 369713
Katalog-Nummer: 510720
Ausgabedatum normen: 1.11.2020
SKU: NS-1008252
Zahl der Seiten: 48
Gewicht ca.: 144 g (0.32 Pfund)
Land: Tschechische technische Norm
Kategorie: Technische Normen ČSN
Kategorie - ähnliche Normen:
Die Annotation des Normtextes ČSN EN ISO/IEC 29147 (369713):
This document provides requirements and recommendations to vendors on the disclosure of vulnerabilities in products and services. Vulnerability disclosure enables users to perform technical vulnerability management as specified in ISO/IEC 27002:2013, 12.6.1[1]. Vulnerability disclosure helps users protect their systems and data, prioritize defensive investments, and better assess risk. The goal of vulnerability disclosure is to reduce the risk associated with exploiting vulnerabilities. Coordinated vulnerability disclosure is especially important when multiple vendors are affected. This document provides: - guidelines on receiving reports about potential vulnerabilities; - guidelines on disclosing vulnerability remediation information; - terms and definitions that are specific to vulnerability disclosure; - an overview of vulnerability disclosure concepts; - techniques and policy considerations for vulnerability disclosure; - examples of techniques, policies (Annex A), and communications (Annex B)
