Skip to main content

Software Vulnerability Disclosure in Europe

Technology, Policies and Legal Challenges

Edited by Lorenzo Pupillo, Afonso Ferreira, and Gianluca Varisco

Cybersecurity is a hot topic of debate in today’s policy circles. The abuse of software vulnerabilities is a growing concern that needs to be urgently addressed with better solutions, as increasing numbers of devices and people are connected to the internet every day. This CEPS Task Force report offers the first comprehensive account of the various measures EU member states are taking to counter these challenges. Drawing on current best practices throughout Europe, the US and Japan, the Task Force explored ways to formulate practical guidelines for governments and businesses to harmonise the process of handling SVD throughout Europe. These discussions led to policy recommendations addressed to member states and the EU institutions for the development of an effective policy framework for introducing coordinated vulnerability disclosure (CVD) and government disclosure decision processes (GDDP) in Europe.

Get daily updates from Brookings