Scottish Cyber Coordination Centre - vulnerability coordination: policy and procedure

Scope:

2.1 In order to provide Scottish Ministers with assurances around exposure to and mitigation of significant cyber risks, SC3 will coordinate the notification and responses to exposure to vulnerabilities that are known to have been exploited, have been given a critical severity rating, and/or have been given a high probability of exploitation rating.

2.2 SC3 will work with Scottish public sector Centres of Excellence/ Expertise and or Single Point of Contacts (SPoC), and will utilise these networks to maximise reach and coordinate both dissemination and any requests for returns. This will support efficient dissemination, response, coordination and reduce duplication of effort.