Improving the Processes for Disclosing Security Vulnerabilities to Government Entities in India

Abstract

This policy brief draws from knowledge that has been gathered from various sources, including information sourced from newspaper and journal articles, current law and policy, as well as from interviews the researchers conducted with various members of the Indian information security community. This policy brief touches upon the issue of vulnerability disclosures, specifically those that are made by individuals to the Government, while exploring prevalent challenges with the same and making recommendations as to how the Government’s vulnerability disclosure processes could potentially be improved.

Keywords: vulnerability disclosure, information technology act