A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA256



# Subdomeinen van cbs.nl kunnen met een 302 redirect verwijzen naar

# het centrale bestand op https://www.cbs.nl/.well-known/security.txt



Expires: 2027-01-31T22:59:00.000Z

Canonical: https://www.cbs.nl/.well-known/security.txt



Policy: https://www.cbs.nl/nl-nl/over-ons/website/responsible-disclosure

Policy: https://www.cbs.nl/en-gb/about-us/website/coordinated-vulnerability-disclosure--cvd--



Contact: mailto:cert@cbs.nl

Encryption: https://www.cbs.nl/pgp-key.txt

Preferred-Languages: nl, en



-----BEGIN PGP SIGNATURE-----



iQEzBAEBCAAdFiEEyL1PgVURSUB+/uwtgQwdKMaEoxAFAmlTmIcACgkQgQwdKMaE

oxAz1wf+M2G+91npGUfvllCR2Mibki6pF7ycpRz9PAj2yObR8Kz19tvwW9KTctYV

tY9PGgzcxRM4rerL48MyvCBT4eNBCULiqv4zuWRdOnunIZEmvq8MRx/E3HI6u6Z2

lGS4uvK8DuzoQwzUQZLH5xFGB+4JXxcI+niHKKkssx3T0CrG1UuQg+hGkBDtvk//

36NK6znqtm7znnYLA5hzl54C5Ezc22cEWEjvk9UGVwryIQJr/ni0JTdEZuLzPUz1

zFMnyfyMB0OrcFXpXdnLBnUsK53dwi0Gn1nKOe5lALbabIOxXcYPMKwsSyQJ0xyu

b0WMifW4MJCsVOAD9Y+yO9hDI4NwAw==

=Emos

-----END PGP SIGNATURE-----