보안 및 책임 있는 공개

• 1.1 This policy covers the Reports sites published at therisk.global/nexus-reports/, globalriskforum.com/nexus-reports/, globalriskalliance.com/nexus-reports/, nexustandards.com/nexus-reports/ and risksacademy.com/nexus-reports/ (together, the Site), the forms and interfaces they offer and the public repositories from which they are built. Third-party services that the pages request, listed in the cookie and storage notice, are covered by their own providers’ policies.

• 2.1 Send a report to 문의 양식. Describe the vulnerability, the address or component affected, the steps to reproduce it and its likely impact.
• 2.2 Do not include exploit code, personal information, passwords or access keys in a first message. An encrypted channel is arranged on request.

• 3.1 Access, keep or disclose no more data than is needed to show the vulnerability, and stop and report at once if personal information is reached.
• 3.2 Do not modify or delete data, degrade a Service, run denial-of-service or volumetric tests, use social engineering or phishing, attempt physical access, or test the 시스템 of third parties.
• 3.3 Give the publisher reasonable time to fix the vulnerability before any public disclosure, and agree the date of disclosure with it. Disclosure is coordinated, and the reporter is credited if the reporter wishes.

• 4.1 GCRI Canada will not bring legal action against, or refer to law enforcement, a person who reports a vulnerability in good faith and follows this policy, and will treat that research as authorised for the purposes of its own terms. This commitment cannot bind third parties or authorities, and does not cover activity that breaches the law in a way this policy does not contemplate.

• 5.1 An acknowledgement with a reference, an assessment of the report, updates while the fix is made and notice when it is complete. Reports are handled confidentially and the reporter’s details are used only for the report.
• 5.2 No payment or reward is offered for reports.

• 6.1 Findings of automated scanners without a demonstrated impact, the absence of a best-practice setting without a demonstrated risk, reports about third-party services, and vulnerabilities that require a compromised device or an outdated browser.

• 7.1 An incident that affects personal information is handled, recorded and notified to the people affected and to the competent authorities as the privacy documents and the applicable law require.

채택 전에 법률 자문의 검토를 거치도록 준비되어 있습니다.

• 이메일게이트웨이 GW-GRA이 페이지에서 보내기증거, 정정, 사례, 방법, 검토, 번역 또는 프로필 입력 자료. 이 페이지의 태그가 붙어 도착하므로, 이를 담당하는 편집자가 받게 됩니다.
• Zenodo개방형 예치기탁하고 커뮤니티에 제출하기ORCID iD로 Zenodo에 직접 기록을 게시한 뒤, 그곳의 Reports 커뮤니티에 제출하십시오. 큐레이터가 검토하며, DOI는 귀하의 것으로 남습니다.
• 보고서글로벌 리스크 얼라이언스(Global Risks Alliance)어느 담당 부서가 귀하의 내용을 받는지 확인하기안내표를 열면 기여 페이지로 연결되며, 무엇을 가지고 있는지, 어느 담당 부서가 받는지, 각 기여를 어떻게 검토하고 표기하는지, 그리고 라이선스를 확인할 수 있습니다.

개인정보, 민감한 인프라 세부 정보, 공유할 권리가 없는 자료는 절대 보내지 마십시오. 기여물은 사용 전에 검토됩니다. 기여물을 보낸다고 해서 저작자 지위나 편집 권한이 부여되지 않으며, 후원으로 조사 결과를 얻을 수 없습니다.