TDA-02.11—Disclosure of Vulnerabilities
Weight: 5
>Control Description
Mechanisms exist to disclose information about vulnerabilities to relevant stakeholders, including:
(1) A description of the vulnerability(ies);
(2) Affected product(s) and/or service(s);
(3) Potential impact of the vulnerability(ies);
(4) Severity of the vulnerability(ies); and
(5) Guidance to remediate the vulnerability(ies).
>Cross-Framework Mappings
EU Cyber Resilience Act
EU CRA Annexes
NERC CIP
Ask AI
Configure your API key to use AI features.