A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:operativ.it-sikkerhet@nrk.no
Preferred-Languages: no,en
Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/85EF44309CC0DFC4F7E04393E7BCE5AA9411C063
Canonical: https://nrkbeta.no/.well-known/security.txt
Acknowledgments: https://info.nrk.no/hjem/responsible-disclosure-policy/#security-hall-of-fame
Policy: https://info.nrk.no/hjem/responsible-disclosure-policy/
Hiring: https://info.nrk.no/karriere/
Expires: 2024-03-01T09:00:00.000Z
-----BEGIN PGP SIGNATURE-----
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=TnRm
-----END PGP SIGNATURE-----