Chip lifecycle / Checklists / Security lifecycle / Hand-off: vulnerability fix to a security update

Hand-off: vulnerability fix to a security update

Used when a confirmed vulnerability's fix moves from incident response to the security update process and the firmware maintenance release. Run by the incident response manager with the update and release engineers.

1. What is handed over

MustThe update is linked to its vulnerability case.
Evidence
Vulnerability case log
Owner
Incident response manager
MustAffected products and versions are passed to the release team.
Evidence
Vulnerability reproduction report
Owner
Product security engineer
MustThe fix has been reviewed and tested.
Evidence
Security fix
Owner
Security firmware engineer
SeeFlow: Formal design reviews

18 more items for registered members.

Register or sign in to read on

The full lifecycle detail, with its charts, flows, tables and every section, is for registered members. Registration is free and takes a minute. You come back to this page afterwards.