+ID.RA-08 Processes for receiving, analyzing, and responding to vulnerability disclosures are established

ID.RA-08 Processes for receiving, analyzing, and responding to vulnerability disclosures are established

Statement

Processes for receiving, analyzing, and responding to vulnerability disclosures are established

Guidance

Conduct vulnerability information sharing between the organization and its suppliers following the rules and protocols defined in contracts

Guidance

Assign responsibilities and verify the execution of procedures for processing, analyzing the impact of, and responding to cybersecurity threat, vulnerability, or incident disclosures by suppliers, customers, partners, and government cybersecurity organizations

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
is blocked by Threat Intelligence Program
is blocked by Threat Intelligence Feeds
is blocked by Indicators of Exposure (IOE)
is blocked by Vulnerability & Patch Management Program (VPMP)
is blocked by Vulnerability Ranking
is blocked by Vulnerability Remediation Process