Huge numbers of cyber attacks exploit vulnerabilities in computer-based systems and yet vulnerability disclosure is not a straightforward matter, as the discoverer of a
vulnerability could face legal risk if they report that vulnerability. Sofie van der Meulen, Attorney at Law at Axon lawyers in Amsterdam, discusses vulnerability disclosure with a particular focus on ENISA’s recent Good Practice Guide on Vulnerability Disclosure and the Dutch approach to this issue. Read the full article.