A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



# Subdomeinen van cbs.nl kunnen met een 302 redirect verwijzen naar

# het centrale bestand op https://www.cbs.nl/.well-known/security.txt



Expires: 2026-01-31T22:59:00.000Z

Canonical: https://www.cbs.nl/.well-known/security.txt



Policy: https://www.cbs.nl/nl-nl/over-ons/website/responsible-disclosure

Policy: https://www.cbs.nl/en-gb/about-us/website/coordinated-vulnerability-disclosure--cvd--



Contact: mailto:cert@cbs.nl

Encryption: https://www.cbs.nl/pgp-key.txt

Preferred-Languages: nl, en



-----BEGIN PGP SIGNATURE-----



iQEzBAEBCAAdFiEEyL1PgVURSUB+/uwtgQwdKMaEoxAFAmd73IcACgkQgQwdKMaE

oxDoPgf+LX8rHo2LohHHqrv7SBPNPftl4FPys2AMp+a0sVij2Ho0HChGIjLIRGfm

D2y2rnX1c+KdBBmuWbVFFz8ts3akpMIr3rVwi5/B2wzEgPw9u6uBXe/r/Z1g0Gsu

JN7juS0zeez7JwFh4UKWh2R2AY5kW1PAvOu4ryvvSIzdifJYUJEQjRhWAfHUo/ju

9IBlyQZ4UJR+6LeX31UjVcF7/T/npDGhWAR5U4qUSqzWzQJTyOLpQ1z30XAoJztJ

9vR/YMOuYo+OUo5A0nzg1xOQU1MB6Y2ba+wVDA4Xv5P6ZjkzxKHJr1vIJYlR7zd4

vhsRe3oKilhuExm4GlSap0RSfhm5Fw==

=PsT/

-----END PGP SIGNATURE-----