VDPs are at the Heart of the Australian Cyber Security Centre’s Recommendations

## Executive Summary — The Australian Cyber Security Centre (ACSC) published guidance encouraging organizations to implement Vulnerability Disclosure Programs (VDPs), outlining recommended policy elements (scope, allowed/disallowed research, reporting channels, handling timelines, disclosure expectations, and rewards) and urging businesses to adopt VDPs as a strategic component of cybersecurity compliance and risk management.