New Zealand Information Security Manual (NZISM)
Chapter 5: Information security documentation – New Zealand Information Security Manual (NZISM)

New Zealand Information Security Manual (NZISM) 5.9.24.C.01: Develop and publish a vulnerability disclosure policy

What does 5.9.24.C.01 require?

An agency must produce a VDP and must publish it.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Chapter 5: Information security documentation – New Zealand Information Security Manual (NZISM)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll New Zealand Information Security Manual (NZISM) controls