A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:operativ.it-sikkerhet@nrk.no
Preferred-Languages: no,en
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/85EF44309CC0DFC4F7E04393E7BCE5AA9411C063
Canonical: https://p3.no/.well-known/security.txt
Acknowledgments: https://info.nrk.no/hjem/responsible-disclosure-policy/#security-hall-of-fame
Policy: https://info.nrk.no/hjem/responsible-disclosure-policy/
Hiring: https://info.nrk.no/karriere/
Expires: 2024-03-01T09:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=7/Zg
-----END PGP SIGNATURE-----