6. Vulnerability Response
a. Is a security response center set up to handle incoming vulnerability reports from external parties?
42 Software Assurance Pocket Guide Series:
Development, Version 2.3, November 1, 2012