zero-day-response-governance

What problem does it solve?

This Skill provides a framework for governing how an organization handles zero-day vulnerabilities, ensuring a legally sound, ethically responsible, and operationally effective disclosure and response process.

Core Features & Use Cases

• Policy Governance: Defines clear pathways for both discovering zero-days (responsible disclosure) and responding to them when the organization is a victim.
• Response Timelines: Establishes severity assessment and response timelines based on CVSS scores and exploitation status.
• Emergency Response: Outlines criteria and processes for declaring and managing zero-day emergencies, including expedited patching and workaround deployment.
• Use Case: When a critical zero-day is announced and actively exploited in the wild, this Skill helps determine the immediate response actions, necessary approvals, and communication strategies according to established policies.

Quick Start

Govern the response to a newly discovered critical zero-day vulnerability affecting our internet-facing systems.