Glossary: Governance, Risk and Compliance

vulnerability disclosure policy (VDP)

Also written: VDP, vulnerability disclosure

A policy telling outsiders how to report a security weakness and what you promise in return: scope, rules for the finder, safe harbor and reply times. It offers thanks, not money.