A:Answer Thank you for your concern about security issues in the HP Support Assistant. Security is critically important to HP and we know it’s a top issue for our customers and the foundation of trust in our products and services. When vulnerabilities are discovered, our goal is to provide updates to mitigate potential risks as quickly as possible, ideally before the release of information regarding the vulnerability. HP has adopted the industry best practice called Coordinated Vulnerability Disclosure (CVD), and works with partners, industry, and the security community to address vulnerabilities. HP takes the privacy and security of its customers very seriously and always strives to provide prompt notification and remediation of any vulnerabilities. Security bulletins are actively maintained and can be found at https://support.hp.com/us-en/security-bulletins detailing identified issues and their solutions."
The Cybersecurity Tech Accord supports the GFCE's call for industry-wide adoption of transparent policies for coordinated vulnerability disclosure (CVD) | Cybersecurity Tech Accord
Today, the Cybersecurity Tech Accord takes a step forward in enhancing cybersecurity best practices by endorsing greater transparency around receiving, handling and communicating about vulnerabilities.
