prEN ISO/IEC 30111 rev

Cybersecurity — Vulnerability handling and disclosure processes

General information

Current stage: 10.99 New project approved Sep 27, 2025

Originator: CEN/CENELEC

Owner: CEN/CLC/JTC 13 Cybersecurity and Data Protection

Type: European Norm

Scope

This document provides requirements and recommendations for how to process and remediate reported potential vulnerabilities in a product or service.
This document is applicable to anyone involved in handling vulnerabilities.

Life cycle

PREVIOUSLY

PUBLISHED
EN ISO/IEC 30111:2020

NOW

IN_DEVELOPMENT
prEN ISO/IEC 30111 rev
10.99 New project approved
Sep 27, 2025