Doing the right thing: How CISOs should approach responsible disclosure
Briefly