Skip to main content

Responsible disclosure

The established security research norm of privately notifying an organization of a discovered governance or security gap, with a reasonable window to remediate, before any broader or public disclosure, balancing the risk of the gap remaining unaddressed against the risk of publicizing it before a fix exists.

Defined in 2 GAGE programs, which carry 3 distinct definitions of it. The wording above is taught in AI Data Governance: The Data Chair.

How each discipline defines it

The same term does different work depending on who is using it. These are the definitions as each program teaches them, unedited.

AI Data Governance: The Data Chair

The established security research norm of privately notifying an organization of a discovered governance or security gap, with a reasonable window to remediate, before any broader or public disclosure, balancing the risk of the gap remaining unaddressed against the risk of publicizing it before a fix exists.

AI Literacy & Professional Conduct

A common synonym for coordinated vulnerability disclosure, emphasizing the discloser's ethical duty to maximize the fix and minimize the harm.

AI Data Governance: The Data Chair

The professional norm, modeled by the Carlini et al. research team, of notifying the party positioned to fix a discovered vulnerability before making that vulnerability public, applied inside an organization as escalating a confirmed poisoning finding through proper channels before wider disclosure.

Where it is taught

The exact lessons this term appears in. The first 7 topics of every program are free with a free account.

Terms it appears with

Not an alphabetical neighbourhood: these are the terms taught in the same lessons, ranked by how often they appear together.