Managing a vulnerability disclosure exercise
Understand best practice for handling a vulnerability disclosure on one of your online systems.
iStock.com/vladwel
Participants and timing
Allow 90 - 120 minutes to perform this exercise. It may help group activity to have a shared screen.
Essential attendees
- Senior leader – Someone who can make important business and IT decisions for your organisation, and has knowledge of business continuity plans.
- Cyber security engineer – Someone who has technical knowledge of the cyber defence activities across your IT estate, including awareness of vulnerability disclosure practice.
- Communications advisor – Someone who manages internal and external communications for your organisation, including during an incident.
Desirable attendees
- HR advisor – Someone who has oversight of your company policies, such as those relating to people management and information technology.
- Scribe – Someone to take notes during the exercise delivery.
