How to run the Incident response review review in the chip and product security lifecycle: entry criteria, the evidence pack, the agenda, the questions reviewers ask, the possible outcomes and the decision record. It is for the product security owner and the reviewers and presenters from the disciplines that bring evidence to the gate.
Incident response review checks that reported vulnerabilities are triaged, fixed or mitigated and disclosed as agreed, and that lessons are fed back into the threat model and the next product.
It is held periodically while the product is supported. It is where patterns show: a class of weakness appearing more than once, slow reproduction, or customers struggling with fixes.
14 more sections for registered members.
The full lifecycle detail, with its charts, flows, tables and every section, is for registered members. Registration is free and takes a minute. You come back to this page afterwards.