A new piece of research released today shows that public institutions in the UK are already defining what constitutes ‘good faith’ security research through their vulnerability disclosure policies.
The report makes the argument for why these revelations bolster the case for reforming the Computer Misuse Act to provide more legal certainty for cyber security professionals.