Glossary: Vulnerability, Asset and Change Management

Responsible disclosure

Also written: coordinated disclosure

A researcher reports a flaw privately and gives time to fix it, often 90 days, before publishing. The organization's part is to make reporting easy, respond, fix and not threaten the reporter.