6-41.1 Response and Disclosure

Question 1

Deviation from a standard configuration or a policy violation

Answer 1

Exceptions

Question 2

The process of approving an exception on either a temporary or permanent basis

Answer 2

Exception Handling

Question 3

Decision not to remediate a level of risk that exceeds an organizations risk appetite or risk tolerance

Answer 3

Risk Acceptance

Question 4

Incentive program that compensates individuals for identifying and reporting vulnerabilities

Answer 4

Bug Bounty

Question 5

Type of disclosure that aims to improve security without causing harm

Answer 5

Responsible Disclosure