ISO/IEC WD 30111.2

Cybersecurity — Vulnerability handling and disclosure processes

General information

Current stage: 20.60 Close of comment period Aug 1, 2026

Originator: ISO/IEC

Owner: ISO/IEC JTC 1/SC 27 Information security, cybersecurity and privacy protection

Type: International Standard

Scope

This document provides requirements and recommendations for how to process and remediate reported potential vulnerabilities in a product or service.
This document is applicable to anyone involved in handling vulnerabilities.

Life cycle

PREVIOUSLY

PUBLISHED
ISO/IEC 30111:2019

NOW

IN_DEVELOPMENT
ISO/IEC WD 30111.2
20.60 Close of comment period
Aug 1, 2026