GCHQ Equity Process (Vulnerability Disclosure Decision Process)

This article describes the Equities Process operated on behalf of the Government by GCHQ. The Equities Process is the means through which decisions are taken on the handling of vulnerabilities found in technology to achieve the best overall outcome in the interests of the United Kingdom.

Essentially its about how GCHQ and NCSC decide how to handle vulnerability disclose in relation to the decision making around non-disclosure for intelligence use.

1 Like