Are there specific metrics used to measure vulnerability response times?
The policy outlines key performance indicators (KPIs) used to measure response times, such as the time taken to acknowledge reports, assess, and deploy patches.