What legal protections are in place for individuals reporting vulnerabilities?
The policy may include provisions that protect individuals from retaliation or legal consequences when they report vulnerabilities in good faith.