5.9. Vulnerability Disclosure Policy (VDP)