Regulators, auditors and IT staff · C0494
How will vulnerabilities be patched?
Designed, not yet built
Short answer
Proposed windows are 72 hours for critical, 14 days for high and 30 days for medium. They are design proposals.
This is designed, not built.
Status as of September 30, 2026. Version 0.2.0, synthetic data only. See what's built today. Not legal, medical or security advice.
Related answers
- Is there a software bill of materials? Designed
- Will there be a bug bounty or disclosure process? Designed
- Is there an incident response plan? Designed
- What documents will IT receive? Designed
See it in context: For auditors and IT · Search the help center · Ask a question