The Agency shall assist and advise Member States and Union institutions in establishing policies and practices for the responsible management and coordinated disclosure of vulnerabilities in ICT products and services that are not publicly known, inter alia by establishing government vulnerability disclosure review processes and coordinated vulnerability disclosure policies.
Agencija državam članicam in institucijam Unije svetuje in pomaga pri vzpostavitvi politik in praks za odgovorno upravljanje in usklajeno razkrivanje šibkih točk izdelkov in storitev IKT, ki niso javno znane, med drugim z vzpostavitvijo procesov za pregled vladnega razkrivanja šibkih točk ter oblikovanjem politik za usklajeno razkrivanje šibkih točk.