Vulnerability Disclosure Policy
or supplier(s), supported by the IT Security team. Priority for bug fixes or mitigations is assessed by looking at the impact severity and exploit complexity. Vulnerability reports might take some time to triage or address. You are welcome to enquire on the status of the process, but should avoid doing