ENISA-Coordinated Vulnerability Disclosure policies in the EU-欧盟的协调漏洞披露政策2022.pdf

COORDINATEDVULNERABILITYDISCLOSUREPOLICIESINTHEEU

April2022

COORDINATED

VULNERABILITY

DISCLOSUREPOLICIES

INTHEEU

APRIL2022

COORDINATEDVULNERABILITYDISCLOSUREPOLICIESINTHEEU

April2022

ABOUTENISA

TheEuropeanUnionAgencyforCybersecurity,ENISA,istheUnion’sagencydedicatedtoachievinga

highcommonlevelofcybersecurityacrossEurope.Establishedin2004andstrengthenedbytheEU

CybersecurityAct,theEuropeanUnionAgencyforCybersecuritycontributestoEUcyberpolicy,

enhancesthetrustworthinessofICTproducts,servicesandprocesseswithcybersecuritycertification

schemes,cooperateswithMemberStatesandEUbodies,andhelpsEuropeprepareforthecyber

challengesoftomorrow.Throughknowledgesharing,capacitybuildingandawarenessraising,the

agencyworkstogetherwithitskeystakeholderstostrengthentrustintheconnectedeconomy,toboost

resilienceoftheUnion’sinfrastructure,and,ultimately,tokeepEurope’ssocietyandcitizensdigitally

secure.MoreinformationaboutENISAanditsworkcanbefoundhere:http://www.enisa.europa.eu/

CONTACT

Tocontacttheauthors,pleaseuseresilience@enisa.europa.eu

Formediaenquiriesaboutthispaper,pleaseusepress@enisa.europa.eu

CONTRIBUTORS

DéboraDiGiacomo(Wavestone),NickConway(Wavestone),AudeThirriot(Wavestone),Thiago

Barbizan(Wavestone),SolèneDrugeot(Wavestone),CristianMichaelTracci(Wavestone),Lorenzo

Pupillo(CentreforEuropeanPolicyStudies(CEPS)),CarolinaPolito(CEPS),FrancescoCampoli

(CEPS)

EDITORS

EvangelosKantas(ENISA),MarnixDekker(ENISA)

ACKNOWLEDGEMENTS

ENISAwouldliketothankthemembersoftheComputerSecurityIncidentResponseTeams