1. Purpose of the gate
Incident response ready confirms, before the security release, that a public way to report vulnerabilities, a disclosure policy and a staffed procedure are in place for the product, so the first report after shipment is handled properly. The security release approval that follows it treats incident response as one of its conditions.
The gate also checks the practical means to respond: benches and samples for reproduction, access to design records, contacts in engineering and with customers, and a plan for regulatory reporting.
15 more sections for registered members.