f. When a new weakness is found by an outside party, how are the software and associated development
practices reviewed and modified to ensure that similar weaknesses are also detected and removed?
7. Vulnerability Disclosure
a. How are consumers of the software notified about new vulnerabilities found in the code?