Time to talk: Europe and the Vulnerability Equities Process

Finding a healthy balance between a nation’s national security needs and the government’s responsibility to keep the public secure in cyberspace, was a complicated task. One aspect of the problem was vulnerability disclosure. In other words, what should a government do if one of its security agencies learnt about a vulnerability (e.g. a technical flaw) in a software or hardware product?

The authors of this commentary wrote that in 2018 all EU member states still lacked an effective vulnerabilities equities process and yet there was little to no discourse on the subject.