Establishing a Global Community of Practice on Coordinated Vulnerability Disclosure (CVD)
summary
A global Community of Practice on Coordinated Vulnerability Disclosure is established (Dec) to harmonize guidance for third‑party CVD coordinators, meeting monthly and already recording 17 participants from 14 countries. The group finalizes a charter, uses a private GitHub repository for asynchronous work, and targets deliverables and a roadmap to improve multi‑party cases. Spotted problems: membership skews government, members use different CVD definitions and engagement levels. Goal is concrete guidance for coordination roles rather than new regulation.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:30What is CVD
- 4:19CVD global roles
- 8:54Why global CVD community
- 13:12Goals of CVD COP
- 15:44Current CVD group state
- 18:35CVD community challenges
- 20:00Summary and future
- 21:48Feedback call
- 22:31Collaboration with initiatives
- 24:58Q&A
related talks
44mA Researcher Centric Approach to Coordinated Vulnerability Disclosure
24mPushing Coordinated Vulnerability Disclosure forward in Asia Pacific
45mSimplifying Coordinating Vulnerabilities & Disclosures in Open Source...
08mClosing Remarks
37mGoverning Global Vulnerabilities: Standards for Open Source Resilience
45mNational CSIRT as a CVD Hub: Lessons from CERT.PL’s Vulnerability Coordination Cases
01h 00mAdventures in Vulnerability Coordination
53mPanel Discussion: Enabling Accurate, Decentralized Root Cause Mapping at Scale