5 Questions to Ask Legal About Vulnerability Disclosure
by Claire McKenna on December 11, 2019
In part two of our series exploring the relationship between law and security, we’ll look at the key questions cybersecurity should ask legal when a company learns about a vulnerability in a product they produce or use.
Vulnerabilities reside within somewhat of a legal and ethical gray zone when it comes to disclosure and response. There are responsible disclosure practices, but no laws that regulate disclosure. However, vulnerabilities have triggered several instances of litigation.