EUCC Guidelines on Vulnerability Management

EUCC Scheme Guidelines on Vulnerability Management and Disclosure

This guidance outlines processes for vulnerability management and disclosure under the European Common Criteria-based cybersecurity certification scheme (EUCC). It provides recommendations for certificate holders on handling vulnerabilities, emphasizing compliance with ISO/IEC standards. The document addresses preparation, identification, coordination, and disclosure of vulnerabilities to ensure cybersecurity risk management.